From owner-freebsd-questions  Sat Jul 20 18:29:30 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 1457D37B400
	for <freebsd-questions@FreeBSD.ORG>; Sat, 20 Jul 2002 18:29:29 -0700 (PDT)
Received: from khavrinen.lcs.mit.edu (khavrinen.lcs.mit.edu [18.24.4.193])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6748543E4A
	for <freebsd-questions@FreeBSD.ORG>; Sat, 20 Jul 2002 18:29:27 -0700 (PDT)
	(envelope-from wollman@khavrinen.lcs.mit.edu)
Received: from khavrinen.lcs.mit.edu (localhost [IPv6:::1])
	by khavrinen.lcs.mit.edu (8.12.3/8.12.5) with ESMTP id g6L1TQqw026791
	(version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO);
	Sat, 20 Jul 2002 21:29:26 -0400 (EDT)
	(envelope-from wollman@khavrinen.lcs.mit.edu)
Received: (from wollman@localhost)
	by khavrinen.lcs.mit.edu (8.12.3/8.12.3/Submit) id g6L1TQQq026788;
	Sat, 20 Jul 2002 21:29:26 -0400 (EDT)
	(envelope-from wollman)
Date: Sat, 20 Jul 2002 21:29:26 -0400 (EDT)
From: Garrett Wollman <wollman@lcs.mit.edu>
Message-Id: <200207210129.g6L1TQQq026788@khavrinen.lcs.mit.edu>
To: "chris scott" <chris.scott@uk.tiscali.com>
Cc: <freebsd-questions@FreeBSD.ORG>
Subject: Re: roaming ipsec policies and racoon
In-Reply-To: <00a401c2304e$7762c820$a4102c0a@viper>
References: <008501c2304c$59fbd800$a4102c0a@viper>
	<1048.68.49.119.89.1027211092.squirrel@webmail.xinu.com>
	<00a401c2304e$7762c820$a4102c0a@viper>
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

<<On Sun, 21 Jul 2002 01:35:08 +0100, "chris scott" <chris.scott@uk.tiscali.com> said:

> yes it does I believe. I have not looked into this ye thought, does this
> mean I have to have a proper one from an authority that will cost me and arm
> and a leg?

You can be your own certificate authority with `openssl ca'.  It does
require some thought to make it work, but it's not that hard to
operate once you get it going.

-GAWollman


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message