Re: vpn, isakmpd, and X509 certificates

2008-04-27 Thread Stuart Henderson
On 2008-04-27, Marten Rizwan <[EMAIL PROTECTED]> wrote: > Great idea, I just systraced isakmpd Oh nice, I never thought of using systrace like that. Much easier to read than kdump output as a first step when looking at this sort of problem, thanks for the idea :-)

Re: vpn, isakmpd, and X509 certificates

2008-04-27 Thread Marten Rizwan
> I haven't tried this, and it's not in the manual as far as I can > see, but it looks like isakmpd looks in files named after the > identity of the local peer (i.e. srcid) before it tries local.key. > If you get it working, let me know the details and I'll try and > come up with something for the

Re: vpn, isakmpd, and X509 certificates

2008-04-27 Thread Marten Rizwan
Hello Stuart, > On 2008/04/27 14:18, Marten Rizwan wrote: > > Hello ports@, > > this isn't exactly ports@ material...CC'd/reply-to set to misc. > apologize for sending this to ports@, my mistake. > > I'm a happy user of sane OpenBSD IPsec. There is one thing that > I haven't been able to figure

Re: vpn, isakmpd, and X509 certificates

2008-04-27 Thread Stuart Henderson
On 2008/04/27 14:18, Marten Rizwan wrote: > Hello ports@, this isn't exactly ports@ material...CC'd/reply-to set to misc. > I'm a happy user of sane OpenBSD IPsec. There is one thing that I haven't been able to figure out yet though. I want to simultaneously connect to two IPsec servers, both of

vpn, isakmpd, and X509 certificates

2008-04-27 Thread Marten Rizwan
Hello ports@, I'm a happy user of sane OpenBSD IPsec. There is one thing that I haven't been able to figure out yet though. I want to simultaneously connect to two IPsec servers, both of which are OpenBSD boxes and both of them use X509 certificates. These two servers are managed by different admin

isakmpd and x509

2006-02-07 Thread Vincent Bernat
Hi ! By reading carefully isakmpd(8), isakmpd.conf(5) and isakmpd.policy(5) but I don't fully understand how to setup correctly isakmpd to work with X509 certificates. In isakmpd(8), it is said that client certificates must be put in /etc/isakmpd/certs. Why would isakmpd need those ce