Re: [strongSwan] Load tester: Dump the on demand end entity node certificate in pem format

2014-02-11 Thread Narendra K A
Sorry ! made a mistake. The authority key identifier of the On demand certificate is same as Issuer's Subject Key Identifier which is present in the cacerts/ directory. I was confused since both SKI and AKI of the end entity certificate are same. Regards, Naren On Wed, Feb 12, 2014 at 12:16 PM,

Re: [strongSwan] Load tester: Dump the on demand end entity node certificate in pem format

2014-02-11 Thread Narendra K A
Thanks for the inputs Martin, that woked !. But, I observed one more thing. The Authority key identifier and the Subject Key identifier of the On demand certificate is SAME. !. The authority key identifier of the On demand certificate should be the Issuer's Subject Key Identifier right ? (Am using

Re: [strongSwan] Load tester: Dump the on demand end entity node certificate in pem format

2014-02-10 Thread Martin Willi
> Am using load tester plugin. I need to check the end entity certificate > contents (on demand certificate). So need the on demand certificate in .pem > format. You may try to use "ipsec listcerts" to list any certs in the cache, then use "ipsec stroke exportx509 " to print a certificate for a D

[strongSwan] Load tester: Dump the on demand end entity node certificate in pem format

2014-02-09 Thread Narendra K A
Hi all, Am using load tester plugin. I need to check the end entity certificate contents (on demand certificate). So need the on demand certificate in .pem format. I tried adding the below code to the load_tester_creds.c file before destroy, but it is dumping the Issuer certificate in pem format.