x509 certificates

[Rusty <mfilter2@pobox.alaska.net>]

Hi!

I have configured ISAKMPD to work on two (2) gateway machines with a
passphrase.  I am able to get a windoz 98 and a windoz 2000 machine to
talk to each other through the gateways.

That is the end of my success.  I have been working on trying to get the
two gateways to talk to each other using x509 certificates instead of
the passphrase as detailed in the openbsd faq 13.

Has anybody had any success using the x509 certificates?  If so, would
that person or persons be willing to send me a copy of you isakmpd.conf
and isakmpd.policy files?

If that is not possible, does anyone know of some documentation that
produces a working implementation?

TIA,

Rusty

--
"A man who says he understands his wife will lie about other things
too."