Re: isakmpd/x.509 on OpenBSD-2.8-current

[Daniel Lucq <daniel@custodix.com>]

> Licensees: "DN:/CN=ca.vpn.my"
As far as I know you need to include the complete DN of the CA
certificate.

>         Subject: C=DE, ST=Sachsen, L=Leipzig, O=iT-NetService GmbH,
> OU=Network Security, CN=ca.vpn.my/Email=c.bahls@it-netservice.de

I.e., the line in isakmpd.conf should become:
Licensees: "DN:/C=DE/ST=Sachsen/L=Leipzig/O=iT-NetService GmbH/OU=Network
Security/CN=ca.vpn.my/Email=c.bahls@it-netservice.de"
(without the line break, of course ;-) ).

Regards,
Daniel