This problem was introduced in bug 13029. When I create a N2N IPsec connection that uses a PSK and edit the connection, after hitting the Save button, the PSK is being replaced by a base64-encoded version of itself which in return breaks the connection. Could you have a look at this? I think there is a line missing that decodes the entered data again. Maybe we should not even send it back to the user to not leak the secret? Let me know if you need my help.