AW: [Users] Freeswan and bintec x1200

From: Daemen Martin (daemen.martin_at_bergersysteme.com)
Date: Wed Dec 18 2002 - 16:46:31 CET


hi, thanks for answering.
 
one bug, a supporter of tlk told me, is, that the firmware 6.2.5 patch 1 doesn´t work with openssl generated certs. This firmware release only works with certs generated on microsoft based machine. But the new firmware releae 6.2.5 patch 4 should be solve this bug. I have upgraded the firmware and have still the same problems.
 
How do you import the certs ? By the setup tools or console ?
 
best regards, Martin Daemen

        -----Ursprüngliche Nachricht-----
        Von: Alain RICHARD [mailto:alain.richard_at_equation.fr]
        Gesendet: Mittwoch, 18. Dezember 2002 14:31
        An: Daemen Martin
        Betreff: Re: [Users] Freeswan and bintec x1200
        
        
        I have had a lot of problem with the generation of certificates and x1200 routers.

        It seams that the problem is with the x1200 unable to identicate a connection with the certificate subject name (C=FR, L=Saint Etienne,O=EQUATION,cn=myvpn.equation.fr). So I have had to use the X509v3 Subject Alternative Name as identification, using an IP adresse as identity.

        regards,

        Le mardi, 17 déc 2002, ŕ 13:48 Europe/Paris, Daemen Martin a écrit :

                Hi,

                Second try,

                I want to make a connection between a liunx gateway (suse 7.3 / 2.4.16 kernel / freeswan 1.99 / x509 patch ) and a bintec x1200 router ( 6.2.5 firmware / ipsec enabled ).

                Can anybody tell me, how to generate the certificates with openssl and how to import them into the bintec router ? I tried it many different ways, but only the cacert will be imported to the right place. The certs i´ve generated for the bintec will always be placed in the peer section and not in the own certificates section.

                Thanks !

                Mit freundlichen Grüßen

                Berger-EDV Systemberatungs GmbH | Martin Daemen
                Dönhoffstr. 25 | System-Engineer
                42655 Solingen | <mailto:daemen.martin_at_bergersysteme.com>
                http://www.bergersysteme.com | Tel.: 0212/2681100 Fax: 0212/2681101

        -------------------------------------------------------
        Alain RICHARD <mailto:alain.richard_at_equation.fr>
        EQUATION SA <http://www.equation.fr/>
        Tel : +33 477 79 48 00 Fax : +33 477 79 48 01
        Applications client/serveur, ingénierie réseau et Linux

_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users



This archive was generated by hypermail 2.1.5 : Thu Dec 19 2002 - 05:21:01 CET