[Openswan Users] Stoped working

Paul Wouters paul at xelerance.com
Mon Nov 5 18:23:31 EST 2007

On Mon, 5 Nov 2007, Turbo Fredriksson wrote:

> Managed to figure out that the CA cert had expired saturday...
> Darn! Looked for some links on how to extend it but failed
> so I create a new CA, new certs and tried again...
> No luck. I get error 786. Looking in the 'mmc' on the XP
> host, I see that there's a warning in the cert change.
> Freely translated from Swedish:
> The [user cert] is not valid, since one of the certificate
> routes in the certificate chain does not seem to have permission
> to create certificates or can not be used as 'end entity
> certificate' (!?).

Try ftp://ftp.openswan.org/openswan/windows/certimport/certimport/Release/certimport.exe

to import the PKCS#12 file on windows. Looks like you might not have the
certificates in the proper locations.


Building and integrating Virtual Private Networks with Openswan:

More information about the Users mailing list