[Design] a question about x509cert

Hello,

I have attempted to build a secure channel between two hosts locating in the same local net. my ipsec.conf for two hosts are designed like following:

ipsec.conf for host (10.10.10.112)

    config setup

        interfaces=%defaultroute
        klipsdebug=none
        plutodebug=none
        plutoload=%search
        plutostart=%search
        uniqueids=yes

    conn %default
        keyingtries=1
        compress=yes
        disablearrivalcheck=no
        authby=rsasig
        leftrsasigkey=%cert
        rightrsasigkey=%cert

    conn one-one
        right=10.10.10.114
        rightid="####"
        # local host is left
        left=10.10.10.112
        leftcert=x509cert_no1.der
        auto=add
        pfs=yes

ipsec.conf for host (10.10.10.114)

    config setup

        interfaces=%defaultroute
        klipsdebug=none
        plutodebug=none
        plutoload=%search
        plutostart=%search
        uniqueids=yes

    conn %default
        keyingtries=0
        compress=yes
        disablearrivalcheck=no
        authby=rsasig
        leftrsasigkey=%cert
        rightrsasigkey=%cert

    conn one-one
        left=10.10.10.112
        leftcert=x509cert_no1.der
        right=10.10.10.114
        rightcert=x509cert_no3.der
        auto=add
        pfs=yes

but when I executed command line with

# ipsec auto --up one-one

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

I also get the same error report such as

"no suitable connection for peer '#####$$'"

Please help me to find the cause of that error!

Thank you in advance!

Liying