(racoon 67) Re: How trust a certification authotiry

[Shoichi Sakane <sakane@tanu.org>]

> i am using racoon (netBSD 1.6) with certificates and I need to trust a certification authority. I installed the CA certificate file in my openssl cert dir and create a link named <cert hash>.0 to the cert file, but when i set the  "verify_cert on" in racoon, i obtain this error message
> 
> Mar 20 17:53:02 Faito racoon: INFO: isakmp.c:803: begin Identity Protection mode.
> Mar 20 17:53:04 Faito racoon: ERROR: crypto_openssl.c:337: unable to get local issuer certificate(20) at depth:0 SubjectName:/C=IT/O=o/OU=IPsec Devices/CN=cn
> Mar 20 17:53:04 Faito racoon: ERROR: oakley.c:1291: Invalid authority of the CERT.

the 2nd message meant that racoon could not get the file of the issuer's
certificate of the certificate which sent by the peer.
please make sure if the CA certificate file you installed in the directory
is the issuer's one.