Re: [CentOS] upgrade to 5.4 openswan broke

2009-10-23 Thread Ralph Angenendt
On Fri, Oct 23, 2009 at 5:33 AM, Myron Williams l...@wcstc.com wrote: Any help would be appreciated. I just got told that you have to feed all certificates to nss storage instead of having them in pem files. See README.nss for more hints. Regards, Ralph

Re: [CentOS] upgrade to 5.4 openswan broke

2009-10-23 Thread Timothy Murphy
Ralph Angenendt wrote: I just got told that you have to feed all certificates to nss storage instead of having them in pem files. See README.nss for more hints. I found these remarks, as also /usr/share/doc/openssh-4.3p2/README.nss, more or less unintelligible. Does one really have to do

Re: [CentOS] upgrade to 5.4 openswan broke

2009-10-23 Thread Ralph Angenendt
On Fri, Oct 23, 2009 at 1:28 PM, Timothy Murphy gayle...@eircom.net wrote: Ralph Angenendt wrote: I just got told that you have to feed all certificates to nss storage instead of having them in pem files. See README.nss for more hints. I found these remarks, as also

[CentOS] upgrade to 5.4 openswan broke

2009-10-22 Thread Myron Williams
Hi All, I upgraded from 5.3 to 5.4 today on a vpn gateway using openswan. After the upgrade the vpn stopped working. From what I could tell the new version of openswan uses NSS. I tried following the instructions in this thead https://bugzilla.redhat.com/show_bug.cgi?id=508107 without success.