oting that Microsoft's ipsec
> implementation in Windows Server 2008 doesn't appear to require this.)
>
> -Kyle H
>
> On Mon, Sep 8, 2008 at 2:29 PM, Chris Zimmerman
> <[EMAIL PROTECTED]> wrote:
>> Here's what I had to add to the config to get it to
ughts on why this works?
On Tue, Aug 26, 2008 at 2:50 PM, Chris Zimmerman
<[EMAIL PROTECTED]> wrote:
> Well, those attributes will work (minus the IKE one-it was not
> recognized) but the Watchguard does not assign it with a type of
> IPSec, so I've contacted Watchguard suppor
erverAuth,clientAuth,ipsecIKE,ipsecendsystem,ipsectunnel,ipsecuser
>
> This /should/ do it, but since I don't do anything with IPsec I can't
> test it. My reference is
> http://www.alvestrand.no/objectid/1.3.6.1.5.5.7.3.html
>
> -Kyle H
>
> On Tue, Aug 26, 2008 at 1:17 P
gt; On Tue, Aug 26, 2008 at 10:33 AM, Chris Zimmerman
> <[EMAIL PROTECTED]> wrote:
>> What is the appropriate section?
>>
>> Sorry if this is a basic question, but I am working on improving my
>> knowledge.
>>
>> On Tue, Aug 26, 2008 at 10:24 AM, Patri
rverAuth,clientAuth
>
> And then regen the certificate.
>
> Have fun.
>
> Patrick.
>
>> -Kyle H
>>
>>
>> On Tue, Aug 26, 2008 at 9:20 AM, Chris Zimmerman
>>
>> <[EMAIL PROTECTED]> wrote:
>> > Here's the cert for the Watchguard
f0:57:4e:
ed:ec
On Tue, Aug 26, 2008 at 9:14 AM, Kyle Hamilton <[EMAIL PROTECTED]> wrote:
> openssl x509 -in [filename] -noout -text -inform PEM
>
> -Kyle H
>
> On Tue, Aug 26, 2008 at 8:44 AM, Chris Zimmerman
> <[EMAIL PROTECTED]> wrote:
>> That comman
That command seems to have a syntax problem, showing: "unknown option
[cert.pem-inserted my cert here]"
On Mon, Aug 25, 2008 at 10:55 PM, Tim Hudson <[EMAIL PROTECTED]> wrote:
> Chris Zimmerman wrote:
>>
>> I am working to setup a Watchguard firewall with x509 ce
I am working to setup a Watchguard firewall with x509 certs for VPN
tunnels. I have created my own CA on my laptop and I have created a
CSR on the Watchguard product. I have then signed the CSR with my CA
certificate successfully which then imports into the Watchguard.
Here's the problem: Watchgu