You already have the rightca line in your W2k ipsec.conf file.
I just put the distinguished name between double quotes for you.
Andreas
Ed Cates wrote:
> Okay, I'm going to be clueless now, because I really feel like I am.
>
> Where would I add that in the Win2K ipsec.conf file?
>
> Thanks,
> --Ed
>
> Andreas Steffen wrote:
>
>> Ed Cates wrote:
>>
>>> -----Win2K ipsec.conf - excuse the line wrap on "rightca"-----
>>>
>>> conn win-test
>>> left=%any
>>> right=12.44.172.114
>>
>>
>>
>>> rightca="C=US, S=CA, L=City, O=Company, Inc., OU=IT,
>>> CN=Common Name, E=address_at_domain.com"
>>
>>
>>
>> The issuer DN must be put between double quotes!
>>
>> The error message
>>
>> > 7-11: 09:25:39:220 Error in CertStrToName -2146885597
>> > 7-11: 09:25:39:220 Failed to get issuer DN
>> > 7-11: 09:25:39:220 Blew DN convertion
>> >
>>
>> points in this direction.
>>
>> Regards
>>
>> Andreas
>>
>> ======================================================================
>> Andreas Steffen e-mail: andreas.steffen_at_strongsec.com
>> strongSec GmbH phone: +41 76 340 25 56
>> Alter Zürichweg 20 home: http://www.strongsec.com
>> CH-8952 Schlieren (Switzerland)
>> ==========================================[strong internet security]==
>>
>>
>
>
>
-- ====================================================================== Andreas Steffen e-mail: andreas.steffen_at_strongsec.com strongSec GmbH phone: +41 76 340 25 56 Alter Zürichweg 20 home: http://www.strongsec.com CH-8952 Schlieren (Switzerland) ==========================================[strong internet security]==_______________________________________________ Users mailing list Users_at_lists.freeswan.org http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:20:23 CEST