HY-LINE truecon Router Handbuch
HY-LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching systems(at)hy-line.de www.hy-line.de/systems
Seite 62
VPN-ipsec certificate connections
Base settings: see VPN with preshared Keys.
The HY-LINE router is based on x.509 certificates. The router uses 2 files: the certificate file with extension .crt and
the private key file with extension: e.g. p12 for pkcs 12 Files.
For x.509 certificates in one file you have to split it into two
files. For example with the software: XCA .
IMPORTANT: The Private Key File must not be protected by a password.
(remove with OpenSSL).
Use the software XCA to split the certificate in two files(
http://xca.hohnstaedt.de/?page_id=3
)
Remove password in the Public Key File with OpenSSL (
http://www.openssl.org/
):
Start OpenSSL prompt
Check if password protected, you won’t see any information:
pkcs12 -in Name_des_Zertifikats.p12 -info
Clear password in the private Key File:
pkcs12 -in Name_des_Zertifikats.p12 -info -nodes -nocerts -out Name_des_Zertifikats _neu.pem
