These pages are out of date and presented here for historical purposes only.

Please follow this link for the current pages.

PGPnet with virtual identity & x509 authentication

In this example, I assume that you have knowledge of isakmpd and PGPnet configuration. If this is your first attempt to create an IPsec VPN, please refer to the other examples for a simplified explanation of how to do a basic VPN. Virtual identity only works with PGP 7.1 and I have only tested with OpenBSD 3.0.

There is quite some configuration in order to get this to work. Nothing that we can't handle though ;-)

• First, setup the CA and certificates on the OpenBSD gateway.
• After that we create at least one user certificate.
• Then it's time to configure the PGPnet clients.
• and isakmpd on the OpenBSD gateway.
• We should be connected now and we need to look at some policy juggeling.