Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 650 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

can anyone create a x509-zertificate to help me out of trouble?

Krischeu
Dear NG,

is anybody out there, who want to give me a little hope?

yes? --> Thank god!

Please contact me and i will give you the loginpossibility to the astarofirewall to have a look into the faulty configuration.

Thanks in advance for your spendet time.
If you are nearby you will recieve a cake, wine or eqivalent.


This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to medic
    I want to create a tunnel from astaro1 to astaro2.
    I am fighting with this for 4 to 6 Weeks.
    I know the article and i am using the astaro hands on workshop.
    Normally i know what i am doing. But i do not know anymore what to do.
    So now i am searching for a friendly guy who wants to help me.
    The tunnel was working before i changed to offical ip-addresses with x509 certificates and distinguish names. After the change i can only fire up the tunnel when i use the preshared key. If i create new certificates (rootca and so on) it will not work and there is no real errormessage.

    Could you be so kind to have a look into the configuration and do the chages?
  • 0 in reply to Krischeu
    Hmmmm 
    Try to create a new cert (using IP Adress as VPN ID) for your firewall (witch you have made the IP change) and replace the existing cert with the new one. --> IPSec VPN -- Local Keys -- Local Cerificate
    If this doesn't work send me a PM

    Medic
  • 0 in reply to medic
    The fucking MTU was creating the problem.

    If i create certificates with 1024 encryption it is working.
    Encryption with 2048 will be tested now.
    Encryption with 4096 is NOT working. --> works only here at internal network!!! NOT over the internet!!!
Cookie Information Banner