[Vpn-help] saving config file with all certificates (main mode)

[Dietmar Papperitz]

Hallo Mathew,

Hmm... I export the configuration, go to file path and delete my certs. Then
I import the configuration and now the certificates where I have deleted
before are now on file path again. If I delete not before the import
function asks me to overwrite the certs by importing the configuration file.
So I think the certs are not stripped.

greetings
Dietmar


-----Ursprüngliche Nachricht-----
Von: vpn-help-bounces at lists.shrew.net
[mailto:vpn-help-bounces at lists.shrew.net] Im Auftrag von Matthew Grooms
Gesendet: Dienstag, 17. Juni 2008 05:06
An: Dietmar Papperitz
Cc: vpn-help at lists.shrew.net
Betreff: Re: [Vpn-help] saving config file with all certificates (main mode)

Dietmar Papperitz wrote:
> Hallo Matthew,
> 
> i use main mode with certificates.
> with new candidate releases you every time save the Shrew Soft VPN client
> config with the whole certs. I thinks it's not so good and in the release
> before you only save the config, not the certs. It's will be difficult if
> someone steals your notebook, stick, etc. Please change it for final
> release.
> 

Deitmar,

I assume you are referring to how the client embeds certificates when 
exporting the site configuration? Its so the configuration data is 
complete and self contained. An operational site configuration should 
only point to the certificate file path and not contain certificate 
data. In other words, the certificate data is added to the vpn file on 
export and stripped during import.

Thanks,

-Matthew
_______________________________________________
vpn-help mailing list
vpn-help at lists.shrew.net
http://lists.shrew.net/mailman/listinfo/vpn-help