Due to a more stringent syntax checking introduced by the FreeW/SWAN
team I had to change my notation for IDs of type ID_DER_ASN1_DN.
It is now
leftid="/C=BE/ST=Brussels/L=Brussels/O=Easynet/OU=Customer Care/
CN=johan.boeckx.be.easynet.net"
IDs of type ID_FQDN don't need any quotes, thus
rightid=@entropy.office.be.easynet.net
Regards
Andreas
======================================================================
Andreas Steffen e-mail: andreas.steffen_at_zhwin.ch
Zuercher Hochschule Winterthur home: http://www.zhwin.ch/~sna/
CH-8401 Winterthur (Switzerland) phone: +41 76 340 25 56
===============================================================[ZHW]==
> -----Original Message-----
> From: users-admin_at_lists.freeswan.org
> [mailto:users-admin_at_lists.freeswan.org]On Behalf Of johan
> Sent: Donnerstag, 2. Mai 2002 02:53
> To: users_at_lists.freeswan.org
> Subject: [Users] white spaces in leftid
>
>
> Hi,
>
> I have a problem since i tried to change from freeswan 1.91 to 1.92 and
> now to freeswan 1.97. I have a ipsec to a remote netscreen10 where ipsec
> is configured. the ipsec is configured with x509 certificate version
> x509patch-0.9.11. The problem is the white space in the leftid at my
> side and of course also for the other users, which means that all linux
> users are forced to use freeswan 1.91 and not higher, which means they
> can not upgrade to kernel higher then 2.4.9.
>
> conn easynet-rsa
> authby=rsasig
> left=%defaultroute
> leftid=@'/C=BE/ST=Brussels/L=Brussels/O=Easynet/OU=Customer
> Care/CN=johan.boeckx.be.easynet.net'
> leftrsasigkey=%cert
> right=212.100.163.12
> rightsubnet=212.100.163.0/24
> rightrsasigkey=%cert
> rightid=@'entropy.office.be.easynet.net'
> auto=start
>
>
> As you can see , there is a white space in the OU : Customer Care.
> The error message is the ipsec barf :
> May 2 02:30:17 spiderke ipsec__plutorun: ipsec_auto: fatal error in
> "easynet-rsa": (/etc/ipsec.conf, line 64) white space within non-quoted
> parameter "leftid"
>
> Is there a patch to resolve this problem, or another way ?
>
> Greetz,
> Johan Boeckx
>
>
>
>
> _______________________________________________
> Users mailing list
> Users_at_lists.freeswan.org
> http://lists.freeswan.org/mailman/listinfo/users
>
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:19:57 CEST