Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    ECDSA certificate and IPSec

    Scheduled Pinned Locked Moved
    IPsec
    1
    1
    355
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      seanmcb
      last edited by

      I have a working IPSec VPN. But my CA and cert are expiring soon so I thought I'd use the more modern ECDSA instead of RSA.

      An ECDSA CA seems to work. But...

      If I generate an RSA certificate from that new CA and then choose that new certificate for the IPSec phase 1, my client can connect successfully.

      But if I generate an ECDSA certificate from that same new CA and then choose that new certificate for the IPSec phase 1, my client cannot connect.

      Should this work?

      Thanks,

      Sean

      1 Reply Last reply Reply Quote 0
      • First post
        Last post