[Openswan Users] Re: Windows XP Roadwarrior (FreeSWAN 2.05 + x509 patch): IPsecpolicy problem [--SOLVED--]

[Paul Wouters]

On Mon, 21 Jun 2004, Nate Carlson wrote:

> - Load the IPSec MMC you created earlier
> - Click IP Security Policies; double-click on the FreeSwan tunnel
> - Double-click roadwarrior-Host filter
> - Click on the 'Authentication Methods' tab
> - Click 'Add', then 'Use a certificate from this CA'
> - Click Browse, find your CA
> - Copy/paste the text in the grayed-out box into your ipsec.conf

Useful, this should go into the wiki :)
 
> I did request at some point that Xelerance add this functionality to
> certimport.exe (so when you import your certificate, it'll tell you the
> proper CA string to use); not sure if they will be able to do that or not,
> though. (Windows may not expose that in a way they can get at, etc.)

You did? It might have gotten lost. I have added it to bugs.openswan.org
as a feature request. I think it is perfectly doable (and not that hard)
 
Paul
-- 

<Reverend> IRC is just multiplayer notepad.