denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Add scenario with hash-and-URL encoding for intermediate CA certificates

Browse Source
This commit is contained in:
Tobias Brunner
2019-11-26 11:12:26 +01:00
parent d592ff72bc
commit 91dabace11
12 changed files with 262 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/swanctl/rw-hash-and-url-multi-level/description.txt
+12
View File
@@ -0,0 +1,12 @@
The VPN gateway <b>moon</b> controls the access to the hosts <b>alice</b> and
<b>venus</b> by means of two different Intermediate CAs. Access to
<b>alice</b> is granted to users presenting a certificate issued by the Research CA
whereas <b>venus</b> can only be reached with a certificate issued by the
Sales CA. The roadwarriors <b>carol</b> and <b>dave</b> have certificates from
the Research CA and Sales CA, respectively. Therefore <b>carol</b> can access
<b>alice</b> and <b>dave</b> can reach <b>venus</b>.
<p/>
The gateway <b>moon</b> doesn't have the intermediate CA certificate installed
and instead of sending the actual certificates, the two clients send "Hash and URL"
certificate payloads. The gateway fetches the certificates via HTTP from server
<b>winnetou</b>.