HY-LINE truecon Router Handbuch Seite 45
HY-LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching systems(at)hy-line.de www.hy-line.de/systems
45
VPN-ipsec certificate connections
Base settings: see VPN with preshared Keys.
The HY-LINE router is based on x.509 certificates. The router uses 2 files: the certifacate file with extension .crt
and the private key file with extension: e.g. p12 for pkcs 12 Files.
For x.509 certificates in one file you have to split it into
two files. For example with the software: XCA .
IMPORTANT: The Privat
e Key File mus’t notbe protected by a
password. (remove with OpenSSL).
Use the software XCA to split the certificate in two files(
http://xca.hohnstaedt.de/?page_id=3
)
Remove password in the Public Key File with OpenSSL (
http://www.openssl.org/
):
Start OpenSSL prompt
Check if password protected, you w
on’t see any information:
pkcs12 -in Name_des_Zertifikats.p12 -info
Clear passwort in the private Key File:
pkcs12 -in Name_des_Zertifikats.p12 -info -nodes -nocerts -out Name_des_Zertifikats _neu.pem
