<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Hi All,<br><br>While testing Client 2.17 on Ubuntu 12.04 LTS following Howto_Juniper_SSG_Using_Certs) with SSG20 I come across following problem: <br><br>13/04/22 15:34:16 -> : send NAT-T:IKE packet 192.168.1.108:4500 -> 120.72.49.xxx:4500 ( 2036 bytes )<br>13/04/22 15:34:16 ii : <b>unable to get local issuer certificate(20) at depth:0</b><br>13/04/22 15:34:16 ii : subject :/C=CN/ST=Beijing/L=Beijing/O= Ltd. /O=Chenhongli Beijing Co./OU=IT/CN=0164022011000224/CN=rsa-key/CN=vpn.chenhongli-bj.net/CN=Ms. Helen Wang <br>13/04/22 15:34:16 !! : unable to verify remote peer certificate<br><br>Since it is a self-signed certificate and per howto I did place the ca.crt into ~/.ike/certs but still has above problem. <br><br>Any help will be appreciated. <br><br>Eric <br><br><br><br><br> </div></body>
</html>