[Openswan Users] Problems with x509
paul at xelerance.com
Sat Dec 15 14:50:02 EST 2007
On Sat, 15 Dec 2007, Jean-Michel Caricand wrote:
> Now I get this on client this error :
> no RSA public key known for 'C=FR, ST=Franche-Comte, O=UFR ST, OU=LIFC,
> CN=vpn, E=lifc at univ-fcomte.fr'; DNS search for KEY failed (can only query DNS
> for key for ID that is a FQDN, IPV4_ADDR, or IPV6_ADDR)
Your certificate did not load, or you mistyped the DN. Ideally, you
do NOT specify the left/rightid when using certificates. Openswan picks
the id from the leftcert/rightcert loaded certificate.
Also make sure you put the private key in /etc/ipsec.secrets, including
the password if the key is protected by a password. See man ipsec.secrets.
Building and integrating Virtual Private Networks with Openswan:
More information about the Users