Re: Sentinel_SSH VPN client and Certs

On Fri, 28 Feb 2003, Infra wrote:
...
> 124805.916159 Negt 40 ike_phase_1_recv_ID: USER_FQDN:

Looks like you have not installed the (correct) CA cert (Issuer: C=US, ST=MN, L=Duluth, O=Cybertheque, CN=nat1.cybertheque.net/emailAddress= root@nat1.cybertheque.net), so this one cannot be verified/trusted.

Hint; does 'openssl verify -CAfile <path>/ca.crt <path>/some_cert.crt' work? (some_cert.crt is the above one, ca.crt is the CA cert that's supposed to validate it).

> 124805.942030 Misc 95 conf_get_str: configuration value not found
> [General]:Pubkey-directory

This isa isakmpd trying to find a trusted public key by other methods.

> 124805.956876 Default rsa_sig_decode_hash: no public key found

But no key is found, so it fails and reports this back to the other beer.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related openbsd.org Links advocacy announce bugs ipv6 misc ports ports-changes security-announce smp source-changes tech Request more information about Pantek

/H

--
Håkan Olsson         (+46) 708 437 337     Carlstedt Research
Unix, Networking, Security      (+46) 31 701 4264        & Technology AB