From: John Sweeney (john.sweeney_at_informark.com.au)
Date: Wed Sep 04 2002 - 02:15:22 CEST
Mm, can't remember perfectly well, but I think it the ike log on
Sentinel was saying that it couldn't find the right CA for the proffered
certificate. I discovered that the cr/lf was a question because then
sentinel started refusing to import a certificate and when I looked at
it in notepad I could see that it didn't have the correct cr/lfs, I put
them in by hand and it worked. So I then converted both the CA and
the host certificates on the freeswan box and I stopped having
troubles.
John
> John,
>
> What format were the certificates in when you passed them through
> unix2dos? Was Sentinel complaining about an "invalid signature"?
>
> Thanks,
> Whit
>
> On Tue, Aug 27, 2002 at 09:19:40AM +1000, John Sweeney wrote:
> > I thnk I have solved my problem. SSH Sentinel wasn't reading the CA
> > certificate I had imported from the Freeswan box, nor the public
> > certificate that the Freeswan box was sending during negotiation.
> > The reason? Both these certificates did not have DOS carriage
> > returns. Passing them through unix2dos seems to have fixed the
> > problem.
> _______________________________________________
> Users mailing list
> Users_at_lists.freeswan.org
> http://lists.freeswan.org/mailman/listinfo/users
********************************************************************
Informark Pty Ltd
www.informark.com.au
phone: +61 (0)2 6230 0555
fax: +61 (0)2 6230 0333
This email message and any accompanying attachments may
contain
information that is confidential and is subject to legal privilege.
If you are not the intended recipient, do not read, use, disseminate,
distribute or copy this message or attachments. If you have
received this message in error, please notify the sender immediately
and delete this message. Before opening any attachments, please
check
them for viruses and defects. Informark and/or its employees shall
not be liable for the incorrect or incomplete transmission of this
e-mail or any attachments, nor be responsible for any delay in
receipt.
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.4 : Wed Sep 04 2002 - 05:19:55 CEST