<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1264" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>I think I am finally getting
somewhere.</FONT></DIV>
<DIV><FONT face=Arial size=2>I have changed my ipsec.conf to look like
this:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>version 2.0</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>config
setup<BR>
interfaces=%defaultroute<BR>
klipsdebug=none<BR>
plutodebug=none<BR>
uniqueids=yes</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>conn
%default<BR>
keyingtries=1<BR>
compress=yes<BR>
disablearrivalcheck=no<BR>
authby=rsasig<BR>
leftrsasigkey=%cert<BR>
rightrsasigkey=%cert<BR>
leftcert=GatewayCert.pem</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>conn
roadwarrior-net<BR>
leftsubnet=192.168.118.0/24<BR>
also=roadwarrior</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>conn
roadwarrior<BR>
right=%any<BR> rightid="C=AT,
L=Wien, O=Schneller Scharau 5th Mind, CN=VPNusr1"</FONT></DIV>
<DIV><FONT face=Arial size=2>
left=%defaultroute<BR>
auto=add<BR> pfs=yes</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I now use the iVPN GUI tool from sourceforge to
manage the connection on the WinXP side.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Now when I connect I see</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Mar 26 12:58:56 firewall pluto[24011]: packet from
100.100.100.100:500: received Vendor ID Payload; ASCII hash:
\036+Qi\005\031\034}|\026|?5\007da<BR>Mar 26 12:58:56 firewall pluto[2401]:
packet from 100.100.100.100:500: received Vendor ID Payload; ASCII hash:
@H7Un<h\005%g^\177<BR>Mar 26 12:58:56 firewall pluto[24011]: packet from
100.100.100.100:500: received Vendor ID Payload; ASCII hash: \020K<BR>Mar 26
12:58:56 firewall pluto[24011]: packet from 100.100.100.100:500: received Vendor
ID Payload; ASCII hash: &$M8m[a3\027*6cPO8\031<BR>Mar 26 12:58:56 firewall
pluto[24011]: "roadwarrior"[1] 100.100.100.100 #1: responding to Main Mode from
unknown peer 100.100.100.100<BR>Mar 26 12:58:56 firewall pluto[24011]:
"roadwarrior"[1] 100.100.100.100 #1: Peer ID is ID_DER_ASN1_DN: 'C=AT, L=Wien,
O=Schneller Scharau 5th Mind, CN=VPNusr1'<BR>Mar 26 12:58:56 firewall
pluto[24011]: "roadwarrior"[1] 100.100.100.100 #1: no suitable connection for
peer 'C=AT, L=Wien, O=Schneller Scharau 5th Mind, CN=VPNusr1'<BR>Mar 26 12:58:56
firewall pluto[24011]: "roadwarrior"[1] 100.100.100.100 #1: sending encrypted
notification INVALID_ID_INFORMATION to 100.100.100.100:500<BR>Mar 26 12:59:16
firewall pluto[24011]: "roadwarrior"[1] 100.100.100.100 #1: ignoring Delete SA
payload: ISAKMP SA not established<BR></FONT></DIV>
<DIV><FONT face=Arial size=2>I then replaced the line righid=..
with</FONT></DIV>
<DIV><FONT face=Arial size=2>
rightcert=VPNusr1Cert.pem<BR> </FONT></DIV>
<DIV><FONT face=Arial size=2>And I still get the no suitable message from above.
So this looks like it doesn't like my certificate, right?</FONT></DIV>
<DIV><FONT face=Arial size=2>Any ideas how I can get it to accept this. I
suspect I am very close to finally getting it to work.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Cheers</FONT></DIV>
<DIV><FONT face=Arial size=2>Leonard</DIV></FONT></BODY></HTML>