[FW-1] checkpoint-FreeSwan

[Helmar Pabst <Helmar.Pabst@FW1-NOSPAMSIV.DE>]

I am using Checkpoint NG FP1 on Solaris,


which certificates i have to give to a FreeSwan Operator
for Connectivity and Setup of Checkpoint<-->FreeSwan.

How do I generate these certificates on Checkpoint Site ?

I found in one document that i have to do a

fwm exportcert -obj checkpoint -cert defaultCert -pem -file
checkpoint-cert.pkcs7

and that this is undocumented.

When i try this, no checkpoint-cert.pkcs7 File is created, after some
seconds
the command returns to the command line ...
This special command i did not find in any other documentation,
especially not
in the checkpoint secure database !

Is it sufficient to give my root-ca to the FreeSwan-Operator ?
(Internal CA ---> Save as --->internal_ca.crt)

Thanks Helmar

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================