On Thu, Mar 09, 2006 at 09:13:05AM -0500, Doug Frippon wrote: > I most admit that I haven`t tried that search exactly but I ve got > this error with ISAKMPD adn try with that instead of openssl. > Thx > But I'd like to know what should I do with all the certs that I have > to create. Which should go on the host pc (my OBSD where the CA is and > etc...) and wich on the user pc
Well, you originally asked how to use OpenSSL to create certificates with subjectAltName. You are now asking a different question, which is very specific to OpenBSD's IPSEC/IKE implementation. I'd suggest that you are more likely to get an answer on an OpenBSD mailing list. When you post there, make sure you post your full pluto/isakmpd config, a dump of your certificates, and all the relevant log entries which are generated when you attempt to bring up a connection. If you have a working configuration using PSK, then you could post that too, as it probably only needs a few tweaks to turn it into a certificate-based one. Regards, Brian. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
