Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[blk1948]

I have my VPN (DIR-130) running using PPTP, I now want to move to IPSEC.

In the Advanced menu, Certificates, what are the file extensions the router is looking for when browsing for Private Keys and Certificates?  Is there an easy way to generate these files?  Does just one entry here suffice, whether it be Local & Private Key, Certificate of Remote Peers or Certificate Authorities?  Can you expand on the functionality of each of these options?

In the Setup menu, VPN Settings, if I choose IPSEC as the VPN, and check X.509 Certificates, it seems I cannot enter anything, the dropdown box does not seem to be working?  Can you confirm this?

I am at the latest firmware version, 1.12.

[blk1948]

Anyone have any ideas on my questions?

[Fatman]

This router requires completely non encrypted keys, the file extension should be set correctly when you export the keys, however if I recall correctly this router will not check the extension anyhow.

I know that the Windows Server 2003 certificate server does not like giving true cleartext keys out and that I had to use some open source tools to extract my cleartext keys last time I set up a certificate based VPN using 2003 keys.

Where are you procuring your certificates from?

[blk1948]

I was going to use openssl to generate self signed certificates.  Will those generated certificates work with this router?

[Fatman]

They should.