Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 10 replies
  • Answers 1 answer
  • Subscribers 34 subscribers
  • Views 2014 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSEC Remote Access .scx file invalid

Craig Glaser

I'm trying to configure an IPSEC remote access VPN.  When I download and extract the configuration archive, the .tgb file appear to be valid, but the .sck file only contains the following:

cannot open file /tmp/root_cert.txt at /scripts/vpn/ipsec/generateJSONVPNClientConf.pl line 331.

I am using the appliance certificate for the local cert and an uploaded certificate for the remote.  The remote certificate uploaded successfully and looks fine when I select it in the IPSEC config in the firewall.

This is running on:   SFVH (SFOS 19.0.0 GA-Build317))

Any suggestions would be welcome.



This thread was automatically locked due to age.
Parents
  • 0

    I have the same problem with v.19.0.

    The .tbg File seems to be valid but there is an Error at the "Public-RootCA-Key"-Section:


    unable to load certificate
    4153952000:error:0909006C:PEM routines:get_name:no start line:crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE

    The Perl script can be open with: cat /scripts/vpn/ipsec/generateJSONVPNClientConf.pl

Reply
  • 0

    I have the same problem with v.19.0.

    The .tbg File seems to be valid but there is an Error at the "Public-RootCA-Key"-Section:


    unable to load certificate
    4153952000:error:0909006C:PEM routines:get_name:no start line:crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE

    The Perl script can be open with: cat /scripts/vpn/ipsec/generateJSONVPNClientConf.pl

Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?