1

Openswan cert syntax

view story
linux-howto

http://serverfault.com – I am missing something getting my openswan instance running with NSS certs. How can I resolve a "no connection has been authorized with policy=RSASIG" message when I have a valid certificate? As far as I can tell it's a syntax problem on the leftcert but I really don't know. /etc/ipsec.d/default.conf conn %default authby=rsasig rightrsasigkey=%cert right=%any left=192.168.100.7 leftcert="tim-centos.domain.org - org" auto=add /etc/ipsec.d/default.secrets : RSA "tim-centos.domain.org - org" /etc/ipsec.d/nspassword NSS Certificate DB:<valid password> (HowTos)

xskl's picture
Submitted by xskl on 09/06/2012

Stories similar to Openswan cert syntax

I've been tearing my hair off in frustration for too long and decided Serverfault might be able to help.

On ClusterA and B I have installed the "openswan" package on Debian Squeeze.

ClusterA ip is 172.16.0.107, B is 172.16.0.108

When they ping one another, it does not reach the destination.

/etc/ipsec.conf:

version 2.0 # conforms to second version of ipsec.conf specification

config setup protostack=netkey oe=off

conn L2TP-PSK-CLUSTER type=transport left=172.1

OpenSwan issues 3 years 43 weeks ago

I'm trying to perform a VPN lan to lan IPSEC connection. By my side, I have a server with 2 IP's, i.j.k.l (destined to act as a VPN gateway) and i.j.k.m (the server). I am a newbie. I don't know if this configuration is normal, but it's forced by our partner.

My configuration is:

OS: Fedora release 7 (Moonshine)

l2tpd over ipsec 35 weeks 6 days ago

Hi All,

I'm having problem connecting to my openswan server (ver 2.4.15) using my iphone 4s. it take me several days and still not works, can any one help me to fix this problem.

How I can keep internet connection after establishing IpSec connection to server?

I have followed to following link to establihed IpSec server http://rootmanager.com/ubuntu-ipsec-l2tp-windows-domain-auth/setting-up-...

then following the below one to connect this server from Windows 7 machine.

http://confoundedtech.blogspot.com/2012/07/windows-l2tp-

I've configured a 3G IP Gateway of mine to connect using IKE Phase 1 Aggressive Mode with PSK to my openswan installation running on Ubuntu server 12.04.

I have share some part of IpSec configurations which include actual Ip assigment. I would like to know if it is possible not give actuall ip.Instead giving such as 0.0.0.0 as generic IP. When I have changed the actuall IP 12.34.56.78 with 0.0.0.0 as follow it does not work.

#vi /etc/ipsec.d/l2tp-psk.conf left=12.34.56.78 leftnexthop=12.34.56.1 vi /etc/ipsec.secrets Add: 12.34.56.78 %any 0.0.

I recieved a list of commands that were run on the right side of the VPN tunnel which is where the Cisco ASA resides. On my side, I have a linux based firewall running debian with openswan installed.

Windows XP keeps using the snakeoil certificate that Ubuntu shipped with, despite the fact that it has never been used in any virtual host ever.

The certificate is located at

/etc/ssl/certs/ssl-cert-snakeoil.pem

I'm not sure where the key is.