signature fails with certificates.

hi
(pls excuse me .....its again a users list question but i was fed up with
so much junk mail that i had to unsubscribe.)

i am trying to negotiate SA;s using certificates. at machine 1 i have
generated the cakey.pem.cacert.pem . on the same machine i have also
generated certificates for both the gateways - g1 and g2. namely g1cert.pem
and g2cert.pem.
i have copied the all the certifictates and also cakey.pem into both g1 and
g2 into the /etc/ipsec.d  folder.

also the ipsec.secrets file has the line :
at g1
:RSA g1key.pem "my secret text"
at g2
:RSA g2key.pem "my secret text"

while adding the connection both g1cert,pem and g1cert.pem are loaded.

but when trying to up the connection , everytime the signature fails.
i hope iam proceeding the right way,.... pls help

thanks and regards.