Re: [Users] no RSA public key

You seem to use an extremely old version of the X.509 patch, i.e. older than 0.9.11. The CHANGES files says:

Version 0.9.11

• When multi-tier X.509 hierarchical trust chains are used, Windows XP sends its certificate plus any intermediate CA certificates wrapped in a PKCS#7 signedData structure. Pluto is now able to parse received certificates of type CERT_PKCS7_WRAPPED_X509. In a first step all intermediate CA certificates are added to the chained list of cacerts rejecting self-signed root CA certificates. In a second step the host or user certificate contained in the PKCS#7 structure is verified along the trust chain up to the self-signed root CA certificate which must be present in /etc/ipsec.d/cacerts and which is loaded statically when Pluto starts up.

So please upgrade to a newer version of the X.509 patch

Andreas

Róta Szabolcs wrote:
> Dear All,

Andreas Steffen                   e-mail: andreas.steffen@strongsec.com
strongSec GmbH                    home:   
http://www.strongsec.com
Alter Zürichweg 20                phone:  +41 1 730 80 64

==========================================[strong internet security]===

Content Security by MailMarshal