added two-certs scenario

This commit is contained in:
Andreas Steffen
2007-05-15 15:54:06 +00:00
parent df9fbd2c64
commit 547f1dd56c
10 changed files with 162 additions and 0 deletions
@@ -0,0 +1,6 @@
The roadwarriors <b>carol</b> and <b>dave</b> set up a connection each
to gateway <b>moon</b>. The authentication is based on <b>X.509 certificates</b>.
Gateway <b>moon</b> has already loaded a revoked certificate for <b>carol</b>
and a self-signed certificate for <b>dave</b> locally but gets actual certificates
as CERT payloads from both peers. The RSA signature verification process tries all
candidate peer certificates until it finds a valid one with a matching public key.