i used freeswan 1.97 with X.509 version 0.9.10 but same config.
> leftid=@xyan.exam.com // i must write this??
> rightid=@zz.exam.com // i must write this??
Please replace your upper 2 lines to this
leftcert=******.pem //xyan.exam.com.pem
rightcert=*****.pem //zz.exam.com.pem
----- Original Message -----
From: "summeryan7912" <summeryan7912_at_sina.com>
To: <users_at_lists.freeswan.org>
Sent: Thursday, May 16, 2002 4:51 PM
Subject: [Users] freeswan1.95 and x.509$B!W%e(B0.9.8
> hello:
> i have install freeswan1.95 with its applying x.509-0.9.8 patch on
both linux gateway, and i have used publickey and preshare authentication
and pluto can establish SA right between the gateway ,but now if i use
certificate ,the pluto tell me authentication failed ?
> and tell me Can't load private key? i don't know the reason
>
> my ipsec.secrets is:
> : RSA yan.exam.com.key "791200"
>
> Ps: 791200 is my password
> this configure is right?? is it supported?
>
> my ipsec.conf is as belows:
> config setup
> interfaces ="ipsec0=eth0"
> klipsdebug=none
> plutodebug=none
> plutoload=%search
> plutostart=%search
> uniqueids=yes
>
> conn %default
> keyingtries=0
> authby=rsasig
> leftrsasigkey=%cert
> rightrsasigkey=%cert
> leftid=@xyan.exam.com // i must write this??
> rightid=@zz.exam.com // i must write this??
> auto=add
>
> conn leftgateway-rightgateway
> left=202.165.11.210
> right=202.165.11.167
>
> ps: i have place the crl ,cacerts and private key in proper location
>
> thanks in advance!!
>
>
> ______________________________________
>
> ===================================================================
> $B%_%D%?%R%Fd9%`%*nY%b%b%O%^!&(B(http://mail.sina.com.cn)
> $B%_%D%?%R%-%h%?`R%J%^!V!W%3%+(Bþ$B%O%h%O%_%&!#%i!,%a%5%i!,!W%c%/%F%&ŒL%h%O%"%;(B
$B%X%&ŒL%h!W!#(B (http://classad.sina.com.cn/2shou/)
> _______________________________________________
> Users mailing list
> Users_at_lists.freeswan.org
> http://lists.freeswan.org/mailman/listinfo/users
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:20:02 CEST