Query regarding DER format certificate & key
Hi,
I converted PEMformat certificate & key to DER format using these commands :-
CA certificate :-
openssl x509 -in demoCA/cacert.pem -inform PEM -out demoCA/cacert.der -outform DER
Own certificate: -
openssl x509 -in tester_cert.pem -inform PEM -out tester_cert.der -outform DER
Private Key: -
openssl rsa -in tester_key.pem -inform PEM -out tester_key.der -outform DER
But now I start negotation using racoon, during negotation it gives error:-
2007-11-02 16:16:19: DEBUG: filename: /etc/IPSec/certs/tester_cert.der
2007-11-02 16:16:59: ERROR: failed to get my CERT.
2007-11-02 16:16:59: ERROR: failed to get own CERT.
2007-11-02 16:16:59: ERROR: failed get my ID
2007-11-02 16:16:59: ERROR: failed to process packet.
2007-11-02 16:16:59: ERROR: phase1 negotiation failed.
If I use PEM format files it works fine, racoon support DER format key & certificate or not ?
please any one help me.
Thanks,
Vaibhav