Re: [Swan] Certificate confusion (fwd)

2015-05-29 Thread Paul Wouters
On Fri, 29 May 2015, Matt Rogers wrote: conn HomeToVoip leftid=%fromcert leftcert=192.168.200.11 leftrsasigkey=%cert rightrsasigkey=%cert leftsendcert=always leftrsasigkey2=EFW-main Is left the main office or the home (aka you). the end that is you should have *sendc

Re: [Swan] Certificate confusion (fwd)

2015-05-29 Thread Matt Rogers
> Date: Thu, 28 May 2015 12:32:30 > From: John Crisp > To: Paul Wouters > Subject: LibreSwan list > > > Certificate confusion > > Hi, > > I'm trying to move from using PSK authent to certificates. > > Have read the Libreswan/NSS howto but seem to be tripping up somewhere. > Certificate hell

[Swan] Certificate confusion (fwd)

2015-05-29 Thread Paul Wouters
-- Forwarded message -- Date: Thu, 28 May 2015 12:32:30 From: John Crisp To: Paul Wouters Subject: LibreSwan list Certificate confusion Hi, I'm trying to move from using PSK authent to certificates. Have read the Libreswan/NSS howto but seem to be tripping up somewhere. Cert