[vpn-help] FW: Cert q's

[Peter Eisch]

On 9/12/06 6:19 PM, "Matthew Grooms" <mgrooms at shrew.net> wrote:

> Brian Jones wrote:
>> 
>>  In that case, here is a bug report for you.  Populating all
>>  three lines with the p12 file does not work.  The cert fails to load.
>>  
>>  (Using lastest vpn-client-1.1-beta-2)
>>  
>>  ## : IPSEC Daemon, ver 1.1.0
>>  ## : Copyright 2006 Shrew Soft Inc.
>>  ## : This product linked OpenSSL 0.9.8a 11 Oct 2005
>>  ii : rebuilding vnet device list ...
>>  ii : device ROOT\VNET\0000 disabled
>>  ii : rebuilding vprot interface list ...
>>  ii : interface IP=10.1.200.156, MTU=1500, MAC=00:15:c5:0a:1c:28 active
>>  ii : skipping interface with null address
>>  ii : 1 adapter(s) active
>>  ii : client ctrl thread begin ...
>>  DB : tunnel added
>>  DB : tunnel dereferenced ( ref count = 0, tunnel count = 1 )
>>  ii : peer config message received
>>  DB : ipsec peer not found
>>  ii : local address selected for peer
>>  ii : 10.1.200.156 ( Broadcom NetXtreme 57xx Gigabit
>>  Controller - Packet Scheduler Miniport )
>>  ii : user credentials message received
>>  !! : 'D820-1.visionshareinc.com.p12' load failed
>>  DB : removing all tunnel refrences
>>  DB : tunnel deleted ( tunnel count = 0 )
>>  ii : client ctrl thread exit ...
>> 
> 
> Brian,
> 
> Is this p12 file you are using password encrypted? I am working my
> through 1.1 issues and have come back to your p12 bug report.
> 

His cert has a password.  p12's around these parts will always have a
password.