[Openswan Users] Stoped working

Paul Wouters paul at xelerance.com
Mon Nov 5 18:23:31 EST 2007


On Mon, 5 Nov 2007, Turbo Fredriksson wrote:

> Managed to figure out that the CA cert had expired saturday...
>
> Darn! Looked for some links on how to extend it but failed
> so I create a new CA, new certs and tried again...
>
> No luck. I get error 786. Looking in the 'mmc' on the XP
> host, I see that there's a warning in the cert change.
>
> Freely translated from Swedish:
>
> The [user cert] is not valid, since one of the certificate
> routes in the certificate chain does not seem to have permission
> to create certificates or can not be used as 'end entity
> certificate' (!?).

Try ftp://ftp.openswan.org/openswan/windows/certimport/certimport/Release/certimport.exe

to import the PKCS#12 file on windows. Looks like you might not have the
certificates in the proper locations.

Paul

-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155


More information about the Users mailing list