Has anybody successfully used openssl to generate certificates for use with Windows 2000 IPSec? I've successfully set up an IPSec gateway between two Windows 2000 boxes using certificate authentication. The certificates were created with Microsoft's Certificate Services. Instead of Certificate Services I want to use openssl to generate the certificates. Using openssl I've created a root CA and a couple of machine certificates. I've managed to figure out how to get openssl to add X509V3 extensions like key usage and extended key usage, and the certificates look to me pretty much identical as the ones generated by Certificate Services. However, when I try to use these certs W2K just comes back immediately and says "... there is no valid machine certificate on your computer for security authentication." Of course, Microsoft provide no information about what they require in certs for IPSec use. Does anybody know the secret? richb. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
