Kubuntu: Howto use vpnc with cisco ssl certificates

Be sure that you’ve build your vpnc package with ssl-support
enabled! Read this:
http://blog.fekw.de/2008/07/02/kubuntu-howto-build-vpnc-with-ssl-support/

1. Copy and rename your cisco ‘rootcert’ file to “/etc/vpnc/your_cisco_rootcert.pem”
2. create a new vpnc profile “/etc/vpnc/your_profile.conf” like this:

   IPSec gateway your_gateway
   IPSec ID your_groupname
   IPSec secret your_secret
   Application version Cisco Systems VPN Client 4.8.00 (0490) Linux
   IKE Authmode hybrid
   CA-File /etc/vpnc/your_cisco_rootcert.pem
   Script /etc/vpnc/vpnc-script
   Xauth username your_vpnc_username
   # Xauth password <password>
   

3. connect to vpn:

   # vpnc your_profile.conf [--local port 0]

4. disconnect from vpn:

   # vpn-disconnect

Done.

In case you have a encrypted IPSec secret you can use this useful website to
decrypt your secret: http://www.unix-ag.uni-kl.de/~massar/bin/cisco-decode