Re: problem with isakmpd with certs

[Andreas Schuldei <andreas@schuldei.org>]

* Angelos D. Keromytis (angelos@cis.upenn.edu) [010105 23:04]:
> I think we may have a terminology mixup here. Your configuration for
> each of the machines should be as follows:
> 
> For machine with IP address X:
>    /etc/isakmpd/ca should contain the CA certificate (there's only one of
> 		  those)

done

>   /etc/isakmpd/certs should contain a file with a certificate whose
> 		  SubjAltName is set to X; the file name does not
> 		  matter

done

>   /etc/isakmpd/private should contain the corresponding private key

done

>   /etc/isakmpd/isakmpd.conf: the local Phase 1 ID should be X

I do not fully understand that. in my setup i have

[my-ID]
ID-type=                IPV4_ADDR
Address=                195.84.105.112

[Phase 1]
195.84.181.91=  utilator

[utilator]
Phase=                  1
Transport=              udp
Address=                195.84.181.91
Configuration=          Default-main-mode
ID=                     my-ID

so obviously I do not have ID set directly to 195.84.105.112, but to my-ID. 
Is this enough?