Re: [strongSwan] CA

2009-03-15 Thread Daniel Mentz
Gbenga wrote: > Here is a good site on how to work OpenSSL: > http://www.madboa.com/geek/openssl/ Well, this site seems to have lots of information about OpenSSL although it does not describe how to set up a CA. I did a web search and found the following site http://sandbox.rulemaker.net/ngps/m

Re: [strongSwan] host-host ikev2

2009-03-15 Thread Daniel Mentz
abhishek kumar wrote: > i can't understand " failed to create a builder for credential type > CRED_CERTIFICATE, subtype (1) " in the syslog. To me it seems like your PKI has problems. Why are you using "C=IN, O=rvce, CN=ajay" as a CA? It should be a user certificate, right? Maybe strongSwan has