D-Link Forums

The Graveyard - Products No Longer Supported => Routers / COVR => DIR-130 => Topic started by: blk1948 on October 19, 2008, 12:11:11 AM

Title: vpn & certificates
Post by: blk1948 on October 19, 2008, 12:11:11 AM
I have my VPN (DIR-130) running using PPTP, I now want to move to IPSEC.

In the Advanced menu, Certificates, what are the file extensions the router is looking for when browsing for Private Keys and Certificates?  Is there an easy way to generate these files?  Does just one entry here suffice, whether it be Local & Private Key, Certificate of Remote Peers or Certificate Authorities?  Can you expand on the functionality of each of these options?

In the Setup menu, VPN Settings, if I choose IPSEC as the VPN, and check X.509 Certificates, it seems I cannot enter anything, the dropdown box does not seem to be working?  Can you confirm this?

I am at the latest firmware version, 1.12.

Title: Re: vpn & certificates
Post by: blk1948 on October 28, 2008, 02:32:19 PM
Anyone have any ideas on my questions?
Title: Re: vpn & certificates
Post by: Fatman on October 30, 2008, 08:58:26 AM
This router requires completely non encrypted keys, the file extension should be set correctly when you export the keys, however if I recall correctly this router will not check the extension anyhow.

I know that the Windows Server 2003 certificate server does not like giving true cleartext keys out and that I had to use some open source tools to extract my cleartext keys last time I set up a certificate based VPN using 2003 keys.

Where are you procuring your certificates from?
Title: Re: vpn & certificates
Post by: blk1948 on October 30, 2008, 10:51:02 AM
I was going to use openssl to generate self signed certificates.  Will those generated certificates work with this router?
Title: Re: vpn & certificates
Post by: Fatman on October 30, 2008, 11:31:02 AM
They should.