You must put the complete subject distinguished name into ipsec.conf, not
just part of it.
Regards
Andreas
Jörg Spilker wrote:
>
> Hello Andreas,
>
> ok, i started from the beginning: This is my Cert installed on my IPSec
> Gateway:
>
> Issuer: C=DE, ST=Nordrhein-Westfalen, L=L\xFCgde, O=JetSys, OU=Computer
> Department, CN=daolin.jetsys.de/Email=root_at_jetsys.de
> Subject: C=DE, ST=Nordrhein-Westfalen, O=JetSys, OU=Computer Department,
> CN=daolin.dyndns.org/Email=root_at_jetsys.de
>
> and this the client cert (packed together with the CA cert into a p12 file
> and installed on the client).
>
> Issuer: C=DE, ST=Nordrhein-Westfalen, L=L\xFCgde, O=JetSys, OU=Computer
> Department, CN=daolin.jetsys.de/Email=root_at_jetsys.de
> Subject: C=DE, ST=Nordrhein-Westfalen, O=JetSys, OU=Computer Department,
> CN=tekener.jetsys.de/Email=js_at_jetsys.de
>
> I put "C=DE, O=JetSys, CN=daolin.dyndns.org" into the ipsec.conf on the
> linux side and "C=DE, O=JetSys, CN=tekener.jetsys.de" into ipsec.conf on the
> client side. I got the same errors as before.
>
> Greetings, Joerg
>
> _______________________________________________
> Users mailing list
> Users_at_lists.freeswan.org
> http://lists.freeswan.org/mailman/listinfo/users
-- ====================================================================== Andreas Steffen e-mail: andreas.steffen_at_zhwin.ch Zuercher Hochschule Winterthur home: http://www.zhwin.ch/~sna/ CH-8401 Winterthur (Switzerland) phone: +41 76 340 25 56 ===============================================================[ZHW]== _______________________________________________ Users mailing list Users_at_lists.freeswan.org http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:19:49 CEST