Mailing List Archive: vpnc hash value size

Hi

I am testing VPNC ( vpnc version 0.5.3 ) using hybrid IKE Auth mode for
authentication . My VPN concentrator is a Cisco ASA 5505 running 8.2 . The
client exits at the time of checking the signatures. What could the problem
be?

My client config is like this

====================================

*# cat /etc/vpnc/default.confIPSec gateway 10.x.x.xIPSec ID MYVPNIKE
Authmode hybridCA-Dir /root/certs/RootCA/certs/IPSec secret xxxxxxxXauth
username xxxxxxxXauth password xxxxxxxxxDebug 3*
=====================================

This is is the error when i run 'vpnc'

Subject name hash: e949104a
Certificate-chain verified correctly!
Decrypted-Size: -1
decr_hash: 00
expected hash:
399f9655 9620900e e2abfd20 99688479 b9dfefaf
vpnc: The hash-value, which was decrypted from the received signature, and
the expected hash-value differ in size.

I have not used an external CA, instead configured it locally on a RHEL6.4
host to generate the CA cert and the identity cert to sign the CSR from the
Cisco ASA

Thanks
Ajay

This is sorted now. Configuration issue with the certificate chain on the
ASA.

On Thu, Feb 6, 2014 at 10:34 AM, Ajay Raghuraj <ajay.raghuraj@gmail.com>wrote:

> Hi
>
> I am testing VPNC ( vpnc version 0.5.3 ) using hybrid IKE Auth mode for
> authentication . My VPN concentrator is a Cisco ASA 5505 running 8.2 . The
> client exits at the time of checking the signatures. What could the problem
> be?
>
> My client config is like this
>
> ====================================
>
>
>
>
>
>
>
>
>
> *# cat /etc/vpnc/default.confIPSec gateway 10.x.x.xIPSec ID MYVPNIKE
> Authmode hybridCA-Dir /root/certs/RootCA/certs/ IPSec secret xxxxxxxXauth
> username xxxxxxxXauth password xxxxxxxxxDebug 3*
> =====================================
>
> This is is the error when i run 'vpnc'
>
> Subject name hash: e949104a
> Certificate-chain verified correctly!
> Decrypted-Size: -1
> decr_hash: 00
> expected hash:
> 399f9655 9620900e e2abfd20 99688479 b9dfefaf
> vpnc: The hash-value, which was decrypted from the received signature, and
> the expected hash-value differ in size.
>
>
> I have not used an external CA, instead configured it locally on a
> RHEL6.4 host to generate the CA cert and the identity cert to sign the CSR
> from the Cisco ASA
>
>
> Thanks
> Ajay
>
>
>
>
>
>
>
>
>