IPSEC - remove X509 - what it affects?

[pmueller (Peter Müller)]

Hi,

@robertuhrik

should I create new ones after regenerating DH and all the stuff assigned with “cryptographic warning” in openvpn section?

no, this is not necessary (see below).

@robertuhrik

is the ipsec section independent from openvpn section

Yes.

@robertuhrik

also removing X509 belongs under ipsec section there - or it affects also the openvpn ?

No removing all X.509 material will only have effect on IPsec. OpenVPN will remain untouched.

It might be helpful or stress-relieving to create a backup of your IPFire’s configuration before removing anything. In case you discover the wrong certificates to be gone, you can simply restore your backup.

Thanks, and best regards,
Peter Müller