[msetto]

Well i got the VPN tunnel built, but not with VaporSEC. First of all you can’t use p12 formated certificates. I had to convert it to .pem format and extract my cert and key. Then I had to remove the password from the key. I put them in /etc/cert the default for racoon not VaporSEC, added verfy_cert off and change authentication_method rsasig (could not do that in VS without having certs on both sides)

Part of my conf file looks like this:

remote xxx.yyy.zzz.123
{
exchange_mode main;
my_identifier asn1dn;
certificate_type x509 “cert.pem” “npkey.pem”;
verify_cert off;
nonce_size 16;
lifetime time 1440 min; # sec,min,hour
proposal {
encryption_algorithm 3des;
hash_algorithm sha1;
authentication_method rsasig ;
dh_group 2 ;
}
}

sainfo address 192.168.2.1/32 any address 192.168.1.0/24 any
{
lifetime time 3600 sec;
encryption_algorithm aes, 3des ;
authentication_algorithm hmac_sha1;
compression_algorithm deflate ;
}

I created a script to do everything and it’s working great. I also noticed that VS wants to copy the certs to one location and the conf file specifies another sorry i can’t remember the location right now i uninstalled a few weeks ago. I hope this helps someone else and look forward to the next version of your software. Thank you making it available without it i would have never of figure this out.

~mike

[Author]

Posts