[Openswan Users] Problems with x509

[Jean-Michel Caricand]

Hi alls,

Does openswan work fine with x509 ? I ask this question because I have a lot 
problems with certificates authentication.

I can up my tunnel without problems between 2 openswan hosts with RSA keys 
authentication. Now I want to use x509 certificates.

I found tutorials with Google and informations on users at openswan.org :-) 

... but that doesn't work :-(

Now I get this on client this error :

no RSA public key known for 'C=FR, ST=Franche-Comte, O=UFR ST, OU=LIFC, 
CN=vpn, E=lifc at univ-fcomte.fr'; DNS search for KEY failed (can only query DNS 
for key for ID that is a FQDN, IPV4_ADDR, or IPV6_ADDR)

Do you any ideas ?

Thank.

-------------------------------------------
Openswan version is : Linux Openswan U2.4.11/K2.6.18-5-686 (netkey)