Hi
We are considering using a Bering firewall to connect two networks via the
internet. Both these networks will have a windows 2000 server which will
need to communicate with each other.
I have got to grips with installing Bering and Shorewall, but I am
struggling with ipsec
I have several questions associated with the setup: -
1) Do I need ipsec or ipsec509 for use with windows 2000 servers located on
each network.
2) If I do need ipsec509, then I note that the current release of Bering
seems to have broken links to the ipsec509.lrp file.
3) Is there any further documentation on the setup of ipsec for a network to
network setup, particularily with setup of certificates. I started to go
through the Bering documentation (LEAF "Bering" user's guide), and attempted
to use the openssl, which is installed on my spare Mandrake 9.0 box, but
errors are generated when I try to run the following to setup a certificate
authority.
# mkdir -p demoCA/private; mkdir -p demoCA/newcerts;
# touch demoCA/index.txt; echo 01 >> demoCA/serial; chmod -R 700 demoCA
# openssl req -x509 -days 3650 -newkey rsa:2048 -keyout
demoCA/private/cakey.pem -out demoCA/cacert.pem
The above runs ok, but when I run the following
# openssl ca -gencrl -out crl.pem
I get no such file or directory trying to load CA private key
Any help would be greatly appreciated.
Regards,
Simon Chalk.
-------------------------------------------------------
This SF.net email is sponsored by:
The Definitive IT and Networking Event. Be There!
NetWorld+Interop Las Vegas 2003 -- Register today!
http://ads.sourceforge.net/cgi-bin/redirect.pl?keyn0001en
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html