Query regarding DER format certificate & key

[Vaibhav Agarwal]

Hi,

I converted PEMformat certificate & key to DER format using these commands :-
CA certificate :-
openssl x509 -in demoCA/cacert.pem -inform PEM -out demoCA/cacert.der -outform DER

Own certificate: -
openssl x509 -in tester_cert.pem -inform PEM -out tester_cert.der -outform DER

Private Key: -
openssl rsa -in tester_key.pem -inform PEM -out tester_key.der -outform DER

But now I start negotation using racoon, during negotation it gives error:-

2007-11-02 16:16:19: DEBUG: filename: /etc/IPSec/certs/tester_cert.der
2007-11-02 16:16:59: ERROR: failed to get my CERT.
2007-11-02 16:16:59: ERROR: failed to get own CERT.
2007-11-02 16:16:59: ERROR: failed get my ID
2007-11-02 16:16:59: ERROR: failed to process packet.
2007-11-02 16:16:59: ERROR: phase1 negotiation failed.


If I use PEM format files it works fine, racoon support DER format key & certificate or not ?
please any one help me.

Thanks,
Vaibhav

[phishphreek]

AFAIK, yes. That error sounds to me like either 1. the cert is not in the /etc/IPSec/certs/ folder or 2. The permissions on the cert are incorrect.