denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Created swanctl/rw-eap-aka-sql-rsa scenario

Browse Source
This commit is contained in:
Andreas Steffen
2017-04-26 20:38:23 +02:00
parent 64f9fa9e9f
commit 25217488d2
13 changed files with 187 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/swanctl/rw-eap-aka-sql-rsa/description.txt
+9
View File
@@ -0,0 +1,9 @@
At the outset the gateway authenticates itself to the client by sending an
IKEv2 <b>RSA signature</b> accompanied by a certificate.
The roadwarrior <b>carol</b> sets up a connection to gateway <b>moon</b>.
<b>carol</b> uses the <i>Extensible Authentication Protocol</i>
in association with the <i>Authentication and Key Agreement</i> protocol
(<b>EAP-AKA</b>) to authenticate against the gateway. In this scenario,
quintuplets from the SQL database /etc/ipsec.d/ipsec.db are used instead
of a physical USIM card on the client <b>carol</b>. The USIM provider on
gateway <b>moon</b> also stores the quintuplets in an SQL database.