Re: isakmpd + x509

now i do a secound try:
i delete all files and typ the following commands:

bash-2.05b# openssl genrsa -out /etc/ssl/private/ca.key 1024

bash-2.05b# openssl req -new -key /etc/ssl/private/ca.key -out /etc/ssl/private/ca.csr

bash-2.05b# openssl x509 -req -days 365 -in /etc/ssl/private/ca.csr -signkey /etc/ssl/private/ca.key -extfile /etc/ssl/x509v3.cnf -extensions x509v3_CA -out /etc/ssl/ca.crt

bash-2.05b# openssl genrsa -out /etc/isakmpd/private/local.key 1024

bash-2.05b# openssl req -new -key /etc/isakmpd/private/local.key -out /etc/isakmpd/private/mail.albani.de.csr

bash-2.05b# openssl x509 -req -days 365 -in /etc/isakmpd/private/mail.albani.de.csr -CA /etc/isakmpd/ca/ca.crt -CAkey /etc/ssl/private/ca.key -CAcreateserial -out /etc/isakmpd/certs/mail.albani.de.crt

bash-2.05b# certpatch -t fqdn -i mail.albani.de -k /etc/ssl/private/ca.key /etc/isakmpd/certs/mail.albani.de.crt /etc/isakmpd/certs/mail.albani.de.crt

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related openbsd.org Links advocacy announce bugs ipv6 misc ports ports-changes security-announce smp source-changes tech Request more information about Pantek

and get this output:

bash-2.05b# isakmpd
113338.402166 Default x509_read_from_dir: PEM_read_bio_X509 failed for ca.crt 113338.402628 Default x509_read_from_dir: PEM_read_bio_X509 failed for ca.srl
113338.402977 Default x509_read_from_dir: PEM_read_bio_X509 failed for mail.albani.de.crt
bash-2.05b#

regards

        marcel beltz

Am Dienstag, 25.02.03, um 23:16 Uhr (Europe/Berlin) schrieb kjell@pintday.org:

>> X509v3 extensions:
Received on Thu Feb 27 05:22:20 2003