Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to access my company VPN using my Centos 5.5 laptop. I have the vpn client certificate issued by my company's IT dept. I am able to access the webmail using the same certificate which I installed in firefox. But I would like to know how to use this certificate to sign in to the VPN. Some of my colleagues use the Cisco VPN client v5.0.? software and the vpn client certificate to login. It works fine. But I would like to do the same with Centos.

I tried connecting using vpnc. I converted the pcf file to conf using pcf2conf. Converted the certificate to .pem file. I replaced the /etc/vpnc/default.conf file with the pcf2conf converted file. Following is the converted conf file:

IPSec gateway
IPSec ID <groupid>
IPSec secret <groupsecret>

IKE Authmode psk
IKE DH Group dh2

CA-File /etc/vpnc/<certificate-file-name>.pem
Xauth username <employee-login-name>

When I tried to connect, I am getting /usr/sbin/vpnc: authentication failed. I am not sure whether the details of the certificate are being used. The reason I suspect this is, on the Cisco VPN client software you can chose between group username/passwd authentication (which prompts you for a PIN) and the vpn client certificate authentication. My colleagues select certificate authentication and they are able to login and are able to access their work stations via remote desktop.

When I searched on the internet on how to configure vpnc to use the certificate, some sources are pointing to IPSec-tools.

Has anyone setup vpn in your centos machine to access your company VPN using the vpnclient certificate authentication?

Looking forward to your replies. Thanks in advance for your time.


EDIT: Kindly move the question to Unix/Linux stackexchange (or any appropriate stackexchange) if this is not the appropriate place to ask this question. Thank you.

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.