luci-app-libreswan: RSA private key not found when using preshared key
Author: Coll147Created Jul 1, 2026Updated Sep 14, 2026
Maintainer: @jempatel
Is there an existing issue for this?
- I have searched among all existing issues (including closed issues)
screenshots or captures
Hi, im trying to set up a Ipsec tunnel thought an UsgPro and my ER605 Openwrt, im using luci-app-libreswan but it never starts the tunnel by reading the logs looks like pluto its trying to use some private key when i set up a preshared key
Just tried with varius combinations (ikev1, ikev2, md5, sha1...) with same resoults
Actual behaviour
Setup a ipsec tunnel using preshared key but the connection doesnt start (phase 1 down). Logs tell pluto is trying to use a private key for the connection
Expected behaviour
Use my preshared key to start the tunnel
Steps to reproduce
Setup a ipsec tunnel
Additional Information
{
"kernel": "6.18.36",
"hostname": "TpER605",
"system": "MediaTek MT7621 ver:1 eco:3",
"model": "TP-Link ER605 v2",
"board_name": "tplink,er605-v2",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "SNAPSHOT",
"firmware_url": "https://downloads.openwrt.org/",
"revision": "r35067-85e15f34ac",
"target": "ramips/mt7621",
"description": "OpenWrt SNAPSHOT r35067-85e15f34ac",
"builddate": "1782428080"
}
}What browsers do you see the problem on?
No response
Relevant log output
[25 jun 2026, 19:42:23 CEST] authpriv.warn: pluto[12331]: loading secrets from "/etc/ipsec.secrets"
[25 jun 2026, 19:42:23 CEST] authpriv.warn: pluto[12331]: loading secrets from "/var/run/ipsec/conf.d/fpinfo_usgpro.secret"
[25 jun 2026, 19:42:23 CEST] authpriv.warn: pluto[12331]: no secrets filename matched "/etc/ipsec.d/*.secrets"
[25 jun 2026, 19:42:23 CEST] authpriv.warn: pluto[12331]: "fpinfo_usgpro/1x1": added IKEv1 connection
[25 jun 2026, 19:42:23 CEST] authpriv.warn: pluto[12331]: initiating all conns with alias='fpinfo_usgpro'
[25 jun 2026, 19:42:23 CEST] authpriv.warn: pluto[12331]: "fpinfo_usgpro/1x1" #1: initiating IKEv1 Main Mode connection
[25 jun 2026, 19:42:23 CEST] authpriv.warn: pluto[12331]: "fpinfo_usgpro/1x1" #1: sent Main Mode request
[25 jun 2026, 19:42:23 CEST] authpriv.warn: pluto[12331]: "fpinfo_usgpro/1x1" #1: sent Main Mode I2
[25 jun 2026, 19:42:24 CEST] authpriv.warn: pluto[12331]: "fpinfo_usgpro/1x1" #1: STATE_MAIN_I2: retransmission; will wait 0.5 seconds for response
[25 jun 2026, 19:42:24 CEST] authpriv.warn: pluto[12331]: "fpinfo_usgpro/1x1" #1: connection fpinfo_usgpro/1x1's RSA private key not found
[25 jun 2026, 19:42:24 CEST] authpriv.warn: pluto[12331]: "fpinfo_usgpro/1x1" #1: unable to locate my private key for RSA Signature
[25 jun 2026, 19:42:24 CEST] authpriv.warn: pluto[12331]: "fpinfo_usgpro/1x1" #1: sending notification AUTHENTICATION_FAILED to "USGPRO":500
[25 jun 2026, 19:42:29 CEST] daemon.warn: odhcpd[2373]: No default route present, setting ra_lifetime to 0!
[25 jun 2026, 19:42:32 CEST] authpriv.warn: pluto[12331]: initiating all conns with alias='fpinfo_usgpro'
[25 jun 2026, 19:42:33 CEST] authpriv.warn: pluto[12331]: initiating all conns with alias='fpinfo_usgpro'
[25 jun 2026, 19:43:13 CEST] daemon.warn: odhcpd[2373]: No default route present, setting ra_lifetime to 0!
[25 jun 2026, 19:43:24 CEST] authpriv.warn: pluto[12331]: "fpinfo_usgpro/1x1" #1: deleting state (STATE_MAIN_I2) aged 60.79193s and NOT sending notification
[25 jun 2026, 19:46:00 CEST] daemon.notice: netifd: wan (3298): udhcpc: sending renew to server "ER605"
[25 jun 2026, 19:46:00 CEST] daemon.notice: netifd: wan (3298): udhcpc: lease of "ER605" obtained from "ER605", lease time 600
[25 jun 2026, 19:46:12 CEST] daemon.warn: odhcpd[2373]: No default route present, setting ra_lifetime to 0!Source: openwrt/luci