If I understand your plan, you will be using self-signed certificates
for authentication. If so, I'd suggest you create a private CA (there are
scripts that come with openssl for this) instead. Using self-signed
certificates is not secure because they can be readily counterfieted.
On Wed, 13 Jun 2007 08:12:18 +0200
"Youssef AGHARMINE" <YAG@d-fi.fr> wrote:
> Hi All,
>
>
>
> Does someone succeed to Get a VPN working between a Cisco client VPN and
> and ASA with certificate.
>
> I intended to generate my certificate with openssl (on linux machine )
> and then to import certificate on the asa and also on client.
>
> My goal is to avoir pre-shared key by certificate, but I don't to have
> to enroll my certificate automatically.
--
Dr. Everett (Skip) Carter Phone: 831-641-0645 FAX: 831-641-0647
Taygeta Network Security Services email: skip@taygeta.net
1340 Munras Ave., Suite 314 WWW: http://www.taygeta.net/
Monterey, CA. 93940
_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
|