[CentOS] IPSec multiple VPN setups

2016-03-21 Thread Glenn Pierce
Hi I hope someone can answer something I'm sure is quite basic. I am following the instructions at https://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-vpn.html On setting up a VPN The part I am having trouble with is when it show the /etc/racoon/racoon.conf file. But it doesn't say whay

Re: [CentOS] IPSec multiple VPN setups

2016-03-21 Thread Glenn Pierce
itionally, here's some info but I advise against the Racoon IPSec >> daemon. >> >> https://www.centos.org/docs/5/html/5.2/Deployment_Guide/sec-racoon-conf.html >> https://wiki.debian.org/IPsec >> >> >> > >> > >> > On Mon, Mar 21,

Re: [CentOS] IPSec multiple VPN setups

2016-03-21 Thread Glenn Pierce
To be fair its not highly sensitive info we are dealing with. -Original Message- From: "Eero Volotinen" Sent: ‎21/‎03/‎2016 17:51 To: "CentOS mailing list" Subject: Re: [CentOS] IPSec multiple VPN setups Err. Sounds like security nightmare. 21.3.2016 7.47 ip. "

Re: [CentOS] IPSec multiple VPN setups

2016-03-21 Thread Glenn Pierce
OS mailing list" Subject: Re: [CentOS] IPSec multiple VPN setups Memset.com ? In real world, rhel 5/centos 5 gets only critical security patches. Eero 21.3.2016 7.54 ip. kirjoitti: > Glenn Pierce wrote: > > Will ask my boss :) We are hosted on memset so not so easy to update > &g

Re: [CentOS] IPSec multiple VPN setups

2016-03-21 Thread Glenn Pierce
As upgrading between major releases are not supported in any way on centos / rhel and clones.. -- Eero 2016-03-21 20:33 GMT+02:00 : > Glenn Pierce wrote: > > I asked about upgrading once and got no reply. Does anyone have > experience > > of having a hosted centos upgraded on a virt

Re: [CentOS] IPSec multiple VPN setups

2016-03-21 Thread Glenn Pierce
I'm Sur my boss will agree. Looks like I have a multi terra byte postgres move to look forward to. Thanks evryone -Original Message- From: "m.r...@5-cent.us" Sent: ‎21/‎03/‎2016 20:03 To: "CentOS mailing list" Subject: Re: [CentOS] IPSec multiple VPN setups

[CentOS] Libreswan PEM format

2016-04-01 Thread Glenn Pierce
Hi I am trying to setup a libreswan vpn between centos 7 and a Mikrotik router. I am try to get the keys working. My problem is the Mikrotik router wants the key in PEM format How do I export the keys generated with ipsec newhostkey into PEM format ? Thanks _

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Glenn Pierce
do any kind of format conversions with openssl commandline client. > > Eero > 1.4.2016 3.56 ip. "Glenn Pierce" kirjoitti: > >> Hi I am trying to setup a libreswan vpn between centos 7 and a Mikrotik >> router. >> >> I am try to get the keys working. My pr

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Glenn Pierce
works, try googling for openssl pem conversion > 1.4.2016 4.32 ip. "Glenn Pierce" kirjoitti: > >> I have tried >> openssl rsa -in bicester_left.pub -outform pem > bicester_left.pem >> >> I get >> unable to load Private Key >> 1403

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Glenn Pierce
key-converter.pl -p < right.pub > /home/glenn/right.pub On 1 April 2016 at 15:44, Glenn Pierce wrote: > Sorry but I have looked for over two days. Trying every command I could find. > > There is obviously a misunderstanding somewhere. > > After generating a key pair with > ipsec

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Glenn Pierce
I just removed the name. I will be regenerating again. To be honest if an attacker to get this to work I would buy then a drink :) On 1 April 2016 at 17:01, Gordon Messmer wrote: > On 04/01/2016 07:44 AM, Glenn Pierce wrote: >> >> Ie >> ***.server.net.INIPSECKEY 10

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Glenn Pierce
Eero Volotinen wrote: > So you are using pkcs12 on centos: > > https://www.sslshopper.com/article-most-common-openssl-commands.html > -- > Eero > > 2016-04-01 17:44 GMT+03:00 Glenn Pierce : > >> Sorry but I have looked for over two days. Trying every command I could

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Glenn Pierce
nen wrote: > You must define connection address and key in ipsec.secrets. > > -- > Eero > > > 2016-04-01 19:38 GMT+03:00 Glenn Pierce : > >> Just trying to follow the instructions here >> >> https://access.redhat.com/documentation/en-U

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Glenn Pierce
On 1 April 2016 at 18:39, Eero Volotinen wrote: > IPSec is very complex with certificates. try first with PSK authentication > and then with certificates > > -- > Eero > > 2016-04-01 20:21 GMT+03:00 Glenn Pierce : > >> I generated according to the docs . Which pro