Re: solved isakmpd and reading x509 certs

[Gordon Chalmers <gordonc@kestral.com.au>]

Hi all,
just for the sake of google and archives :)

PEM_read_bio_X509 error failed when reading certificates
openssl x509 -in cert.crt -noout -text strangely works with no errors

the problem was in isakmpd.conf

[X509-certificates]
Ca-directory=           /etc/isakmpd/ca
Cert-directory=         /etc/isakmpd/certs
CRL-directory=          /etc/isakmpd/crls
Private-key=            /etc/isakmpd/private/local.key

failed

[X509-certificates]
Ca-directory=           /etc/isakmpd/ca/
Cert-directory=         /etc/isakmpd/certs/
CRL-directory=          /etc/isakmpd/crls/
Private-key=            /etc/isakmpd/private/local.key

works...

so don't forget the trailing forward slash!


thanks to all who replied
hair is now being replaced...

I guess the moral is
always use examples from the man pages
and not other sources?

Gordon Chalmers
Kestral Computing