- This topic is empty.
-
Posts
-
hi,
I’m trying to set up a VPN connection (L2TP) using a certificate as the machine authentication token.
I’ve imported both a .p12 and .pem version of the certs that were generated on our VPN server using both ‘Keychain Access.app’ as well as the certtool command. in no case have I been able to add the certificates so that ‘Internet Connect.app’ is able to use them.whenever I try to select the Certificate option for Machine Authentication, I get the following error:
Certificate authentication cannot be used because your keychain does not contain any suitable certificates. Use Keychain Access to import the appropriate certificates into your keychain. If you do not have the certificates required for authentication, contact your network administrator.
does anyone have any idea how to add, install or generate a certificate that will satisfy ‘Internet Connect.app’? if I need to generate the cert locally, what do I need to export in order for the openswan VPN server to be able to auth my machine?
thanks for any help,
aram
Wow, I tried to fight this one a little two. I’m guessing that Internet Connect.app may have specific IP or DNS extensions that must be included as part of the certificate. But, I’m stumped. I tried quite a few options and it still didn’t like my certificates for machine authentication.
When you use Keychain Access to import the certificate, add it to the System keychain. You may need to make /Library/Keychains group-writeable for this to succeed – I had to do a "sudo chmod g+w /Library/Keychains" for this to go through. But if it is added to the System keychain, Internet Connect should find it, and you should be good to go, (at least with getting the client to see the certificate).
- You must be logged in to reply to this topic.