VPN Problems Moto Droid

Discussion in 'Motorola Droid' started by deathcipris, Jun 20, 2010.

  1. deathcipris
    Offline

    deathcipris New Member

    Joined:
    Jun 20, 2010
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    0
    Owned my Droid for quite a long time and I love it. However, recently my CA that handles the Certificates for IPSEC changed over from Server 2003 to Server 2008 and in doing so, there was an entirely new set of certs generated for the network. I proceeded to use the same methods I did last time time to import and load my cert on the phone for IPSEC connections and the phone took the cert just fine. However when I go to connect to the VPN, it just sits there. I have confirmed the data is making it through to the server and the only thing changed was the certificate itself. We went from an old RSA signature for the cert to a new SHA384 signature. Is this the reason I can't connect? Any help would be appreciated.
  2. Barkleyfan
    Offline

    Barkleyfan New Member

    Joined:
    Nov 26, 2009
    Messages:
    276
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    Midwest
    Wish I could help, but I know nothing about VPN's. Figured I'd keep the thread bumped to the top so someone who does know will see it.
  3. deathcipris
    Offline

    deathcipris New Member

    Joined:
    Jun 20, 2010
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    0
    Thanks BarkleyFan!

    Bump
  4. deathcipris
    Offline

    deathcipris New Member

    Joined:
    Jun 20, 2010
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    0
    Well, I resolved the issue. Unfortunately, the only way I was able to do so was reinstall the CA and use an older 2048-bit RSA SHA-1 signature for the root CA, then rerun all the processes involved with a new CA including transferring over the root CA cert to the Droid. Apparently, the Droid has issues understanding SHA-384 cert sigs. I hope this information helps others with the same issue!

    :D