Hi,

ikecert certlocal -kc ...etc.etc should generate a certificate request
and put an entry in the local database. The request looks ok but nothing
is put in the database.

ikecert certlocal -ks which genarates a selfsigned certificate works
fine.

TIA,

Hans

In article <3F740B4D.3F8A6049@ericsson.com>,
Hans de Ridder  <hans.de.ridder@ericsson.com> wrote:
>Hi,
>
>ikecert certlocal -kc ...etc.etc should generate a certificate request
>and put an entry in the local database. The request looks ok but nothing
>is put in the database.

There should be a private key.  Use "ikecert certlocal -l" to verify this.
Once you add the certificate the PKI issues you, it'll match to the private
key.
--
Daniel L. McDonald  -  Solaris Networking & Security Engineering
Mail: danmcd@east.sun.com        |  * MY OPINIONS ARE NOT NECESSARILY SUN'S! *
1 Network Drive  Burlington, MA  |"rising falling at force ten
WWW: http://www.kebe.com/~danmcd | we twist the world and ride the wind" - Rush

Dan McDonald wrote:

> In article <3F740B4D.3F8A6049@ericsson.com>,
> Hans de Ridder  <hans.de.ridder@ericsson.com> wrote:
> >Hi,
> >
> >ikecert certlocal -kc ...etc.etc should generate a certificate request
> >and put an entry in the local database. The request looks ok but nothing
> >is put in the database.
>
> There should be a private key.  Use "ikecert certlocal -l" to verify this.
> Once you add the certificate the PKI issues you, it'll match to the private
> key.
> --

Hi,

The problem is solved, I did not notice ikecert reuses the keys in the certlocal
database.
Sorry for bothering you.

Hans