[Design] signature fails with certificates.

From: Kaustubh Kumbhalkar <Kaustubh.Kumbhalkar(at)lntinfotech.com>
Date: Thu Feb 20 2003 - 03:27:22 EST

hi
(pls excuse me .....its again a users list question but i was fed up with so much junk mail that i had to unsubscribe.)

i am trying to negotiate SA;s using certificates. at machine 1 i have generated the cakey.pem.cacert.pem . on the same machine i have also generated certificates for both the gateways - g1 and g2. namely g1cert.pem and g2cert.pem.
i have copied the all the certifictates and also cakey.pem into both g1 and g2 into the /etc/ipsec.d folder.

also the ipsec.secrets file has the line : at g1
:RSA g1key.pem "my secret text"

at g2
:RSA g2key.pem "my secret text"

while adding the connection both g1cert,pem and g1cert.pem are loaded.

but when trying to up the connection , everytime the signature fails. i hope iam proceeding the right way,.... pls help

thanks and regards.

---

Design mailing list
Design@lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/design Received on Thu Feb 20 04:31:59 2003