Home / user-86044

Tair's questions

Martin Hope
Tair
Asked: 2021-05-26 02:27:30 +0800 CST
  • 0

I have a .pem file with SSL private key and certificate chain for my web-server concatenated into a single file. The file is in following structure:

-----BEGIN PRIVATE KEY-----
...data...
-----END PRIVATE KEY-----

-----BEGIN CERTIFICATE-----
...data...
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
...data...
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
...data...
-----END CERTIFICATE-----

What commands I use to split it to have separate files private.key and fullchain.pem?

ssl-certificate openssl
Martin Hope
Tair
Asked: 2013-04-11 04:48:10 +0800 CST
  • 1

I'm trying to build a VPN setup, where there are several Road-Warriors (various OSes) want to communicate to internal network behind a VPN gateway. The key facts are these:

  • Internal network is 10.254.0.0/24
  • No DHCP
  • Internal hosts are all RHEL/CentOS 6
  • Road-Warriors are assigned virtual addresses within 10.2.0.0/24
  • VPN gateway is a RHEL 6 box with:
    • Internal address 10.254.0.111
    • External address X.X.X.X
  • VPN gateway is NOT the default gateway for internal hosts
  • VPN is implemented using Strongswan

So far Road-Warriors successfully connect to VPN gateway. The issue is that on every internal host I have to setup routing tables to send 10.2.0.0/24 traffic through 10.254.0.111 if I want them be accessible for RWs.

What are other options? How can I centrally manage routing info so that it is autodiscovered by internal hosts?

vpn
Martin Hope
Tair
Asked: 2011-06-29 23:56:39 +0800 CST
  • 1

I'm trying to connect to Cisco IPSEC VPN of my company over DSL Internet. I managed to successfully connect using Cisco VPN Client, now I'm trying to switch to OSX 10.6 native client, because of licensing issues.

The problems is that the connection fails with a dialog box containing the message:

The negotiation with the VPN server failed. Verify the server address and try reconnecting.

I checked logs:

Jun 29 13:10:39 racoon[4551]: Connecting.
Jun 29 13:10:39 racoon[4551]: IKE Packet: transmit success. (Initiator, Aggressive-Mode message 1).
Jun 29 13:10:39 racoon[4551]: IKEv1 Phase1 AUTH: success. (Initiator, Aggressive-Mode Message 2).
Jun 29 13:10:39 racoon[4551]: IKE Packet: receive success. (Initiator, Aggressive-Mode message 2).
Jun 29 13:10:39 racoon[4551]: IKEv1 Phase1 Initiator: success. (Initiator, Aggressive-Mode).
Jun 29 13:10:39 racoon[4551]: IKE Packet: transmit success. (Initiator, Aggressive-Mode message 3).
Jun 29 13:10:42 racoon[4551]: IKE Packet: transmit success. (Mode-Config message).
Jun 29 13:10:42 racoon[4551]: IKEv1 XAUTH: success. (XAUTH Status is OK).
Jun 29 13:10:42 racoon[4551]: IKE Packet: transmit success. (Mode-Config message).
Jun 29 13:10:42 racoon[4551]: IKEv1 Config: retransmited. (Mode-Config retransmit).
Jun 29 13:10:42 racoon[4551]: IKE Packet: receive success. (MODE-Config).
Jun 29 13:10:42 configd[19]: event_callback: Address added. previous interface setting (name: en1, address: 192.168.1.107), current interface setting (name: u92.168.54.147, subnet: 255.255.255.0, destination: 192.168.54.147).
Jun 29 13:10:42 configd[19]: network configuration changed.
Jun 29 13:10:42 vmnet-bridge[111]: Dynamic store changed
Jun 29 13:10:42 named[62]: not listening on any interfaces
Jun 29 13:10:58: --- last message repeated 1 time ---
Jun 29 13:10:58 configd[19]: SCNCController: Disconnecting. (Connection tried to negotiate for, 16 seconds).
Jun 29 13:10:58 racoon[4551]: IKE Packet: transmit success. (Information message).
Jun 29 13:10:58 racoon[4551]: IKEv1 Information-Notice: transmit success. (Delete ISAKMP-SA).
Jun 29 13:10:58 racoon[4551]: Disconnecting. (Connection tried to negotiate for, 19.113382 seconds).
Jun 29 13:10:58 named[62]: not listening on any interfaces
Jun 29 13:10:58 vmnet-bridge[111]: Dynamic store changed
Jun 29 13:10:58 named[62]: not listening on any interfaces
Jun 29 13:10:58 configd[19]: network configuration changed.

Then I opened Terminal, started pinging a server behind VPN, and tried to connect again. Now connection is OK! Logs this time:

Jun 29 13:46:53 racoon[8136]: Connecting.
Jun 29 13:46:53 racoon[8136]: IKE Packet: transmit success. (Initiator, Aggressive-Mode message 1).
Jun 29 13:46:53 racoon[8136]: IKEv1 Phase1 AUTH: success. (Initiator, Aggressive-Mode Message 2).
Jun 29 13:46:53 racoon[8136]: IKE Packet: receive success. (Initiator, Aggressive-Mode message 2).
Jun 29 13:46:53 racoon[8136]: IKEv1 Phase1 Initiator: success. (Initiator, Aggressive-Mode).
Jun 29 13:46:53 racoon[8136]: IKE Packet: transmit success. (Initiator, Aggressive-Mode message 3).
Jun 29 13:46:56 racoon[8136]: IKE Packet: transmit success. (Mode-Config message).
Jun 29 13:46:56 racoon[8136]: IKEv1 XAUTH: success. (XAUTH Status is OK).
Jun 29 13:46:56 racoon[8136]: IKE Packet: transmit success. (Mode-Config message).
Jun 29 13:46:56 racoon[8136]: IKEv1 Config: retransmited. (Mode-Config retransmit).
Jun 29 13:46:56 racoon[8136]: IKE Packet: receive success. (MODE-Config).
Jun 29 13:46:56 configd[19]: event_callback: Address added. previous interface setting (name: en1, address: 192.168.1.107), current interface settinaddress: 192.168.54.149, subnet: 255.255.255.0, destination: 192.168.54.149).
Jun 29 13:46:56 vmnet-bridge[111]: Dynamic store changed
Jun 29 13:46:56 named[62]: not listening on any interfaces
Jun 29 13:46:56 configd[19]: network configuration changed.
Jun 29 13:46:56 named[62]: not listening on any interfaces
Jun 29 13:46:56 racoon[8136]: IKE Packet: transmit success. (Initiator, Quick-Mode message 1).
Jun 29 13:46:56 racoon[8136]: IKE Packet: receive success. (Initiator, Quick-Mode message 2).
Jun 29 13:46:56 racoon[8136]: IKE Packet: transmit success. (Initiator, Quick-Mode message 3).
Jun 29 13:46:56 racoon[8136]: IKEv1 Phase2 Initiator: success. (Initiator, Quick-Mode).
Jun 29 13:46:56 racoon[8136]: Connected.
Jun 29 13:46:56 configd[19]: SCNCController: Connected.

I tested it several times and it consistently behaves the same. What is the magic?

vpn cisco ipsec osx-snow-leopard