Problem with X.509 certificate with IPSec
"David Yerger" <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.m0n0wall |
|---|---|
| Message-ID | <[email protected]> |
I verified that the private key matches the certificate: [root@indium certs]# openssl x509 -noout -modulus -in soekris.pem | openssl md5 0c52c864d1a57fb2e0fb92f26d582e8b [root@indium certs]# openssl rsa -noout -modulus -in soekris.decrypted.key | openssl md5 0c52c864d1a57fb2e0fb92f26d582e8b But when I load them into the IPSec config, I get no tunnel. This is what's logged: Sep 2 19:16:18 racoon: WARNING: No ID match. Sep 2 19:16:18 racoon: ERROR: 256:error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/rsa/rsa_ pk1.c:100: 256:error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/rsa/ rsa_eay.c:625: Sep 2 19:16:18 racoon: ERROR: Invalid SIG. I'm on m0n0wall, Version 1.3b18 Platform Soekris net4801 Thanks in advance! David Yerger