Re: Need assistance with certificates and Watchguard product-LONGSHOT

2008-09-08 Thread Chris Zimmerman
oting that Microsoft's ipsec > implementation in Windows Server 2008 doesn't appear to require this.) > > -Kyle H > > On Mon, Sep 8, 2008 at 2:29 PM, Chris Zimmerman > <[EMAIL PROTECTED]> wrote: >> Here's what I had to add to the config to get it to

Re: Need assistance with certificates and Watchguard product-LONGSHOT

2008-09-08 Thread Chris Zimmerman
ughts on why this works? On Tue, Aug 26, 2008 at 2:50 PM, Chris Zimmerman <[EMAIL PROTECTED]> wrote: > Well, those attributes will work (minus the IKE one-it was not > recognized) but the Watchguard does not assign it with a type of > IPSec, so I've contacted Watchguard suppor

Re: Need assistance with certificates and Watchguard product-LONGSHOT

2008-08-26 Thread Chris Zimmerman
erverAuth,clientAuth,ipsecIKE,ipsecendsystem,ipsectunnel,ipsecuser > > This /should/ do it, but since I don't do anything with IPsec I can't > test it. My reference is > http://www.alvestrand.no/objectid/1.3.6.1.5.5.7.3.html > > -Kyle H > > On Tue, Aug 26, 2008 at 1:17 P

Re: Need assistance with certificates and Watchguard product-LONGSHOT

2008-08-26 Thread Chris Zimmerman
gt; On Tue, Aug 26, 2008 at 10:33 AM, Chris Zimmerman > <[EMAIL PROTECTED]> wrote: >> What is the appropriate section? >> >> Sorry if this is a basic question, but I am working on improving my >> knowledge. >> >> On Tue, Aug 26, 2008 at 10:24 AM, Patri

Re: Need assistance with certificates and Watchguard product-LONGSHOT

2008-08-26 Thread Chris Zimmerman
rverAuth,clientAuth > > And then regen the certificate. > > Have fun. > > Patrick. > >> -Kyle H >> >> >> On Tue, Aug 26, 2008 at 9:20 AM, Chris Zimmerman >> >> <[EMAIL PROTECTED]> wrote: >> > Here's the cert for the Watchguard

Re: Need assistance with certificates and Watchguard product-LONGSHOT

2008-08-26 Thread Chris Zimmerman
f0:57:4e: ed:ec On Tue, Aug 26, 2008 at 9:14 AM, Kyle Hamilton <[EMAIL PROTECTED]> wrote: > openssl x509 -in [filename] -noout -text -inform PEM > > -Kyle H > > On Tue, Aug 26, 2008 at 8:44 AM, Chris Zimmerman > <[EMAIL PROTECTED]> wrote: >> That comman

Re: Need assistance with certificates and Watchguard product-LONGSHOT

2008-08-26 Thread Chris Zimmerman
That command seems to have a syntax problem, showing: "unknown option [cert.pem-inserted my cert here]" On Mon, Aug 25, 2008 at 10:55 PM, Tim Hudson <[EMAIL PROTECTED]> wrote: > Chris Zimmerman wrote: >> >> I am working to setup a Watchguard firewall with x509 ce

Need assistance with certificates and Watchguard product-LONGSHOT

2008-08-25 Thread Chris Zimmerman
I am working to setup a Watchguard firewall with x509 certs for VPN tunnels. I have created my own CA on my laptop and I have created a CSR on the Watchguard product. I have then signed the CSR with my CA certificate successfully which then imports into the Watchguard. Here's the problem: Watchgu