Dirk Mast wrote:
quoted text
> Linux /etc/ipsec.conf:
> 
> version 2.0
> config setup
... (snip)

Hi,

I finally managed to get it up and working (without IKE).

OpenBSD:
	/etc/ipsec.conf:
ike esp from 10.50.0.0/24 to 192.168.9.0/24 peer PUBLIC_LINUX quick \
	auth hmac-sha1 enc aes group modp1024 psk "secret"

Linux:
	/etc/ipsec.conf
conn openbsd
     left=PUBLIC_LINUX
     leftsubnet=192.168.9.0/24
     right=PUBLIC_BSD
     rightsubnet=10.50.0.0/24
     keyexchange=ike
     auto=start
     auth=esp
     authby=secret
     pfs=yes
     keyingtries=%forever
     rekeymargin=4m
     disablearrivalcheck=no
     rekey=yes
     aggrmode=no
     esp=aes128-sha1
     ike=aes128-sha1-modp1024

There is of course an appropriate entry in /etc/ipsec.secrets

Thanks for everybody's help.

Laurent