denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

merged multi-auth branch back into trunk

Browse Source
This commit is contained in:
Martin Willi
2009-04-14 10:34:24 +00:00
parent 6e5c8d9413
commit a44bb9345f
230 changed files with 6163 additions and 4193 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/multi-level-ca-cr-init/description.txt
+5 -7
View File
@@ -1,8 +1,6 @@
The VPN gateway <b>moon</b> controls the access to the hosts <b>alice</b> and
<b>venus</b> by means of two different Intermediate CAs. Access to
<b>alice</b> is granted to users presenting a certificate issued by the Research CA
whereas <b>venus</b> can only be reached with a certificate issued by the
Sales CA. The hosts <b>carol</b> and <b>dave</b> have certificates from
the Research CA and Sales CA, respectively. Initiator <b>moon</b> does not possess
The VPN gateway <b>moon</b> grants access to the hosts <b>alice</b> and
<b>venus</b> to anyone presenting a certificate belonging to a trust chain anchored
in the strongSwan Root CA. The hosts <b>carol</b> and <b>dave</b> have certificates from
the intermediate Research CA and Sales CA, respectively. Initiator <b>moon</b> does not possess
copies of the Research and Sales CA certificates and must therefore request them from
the initiators <b>carol</b> and <b>dave</b>, respectively.
the responders <b>carol</b> and <b>dave</b>, respectively.
testing/tests/ikev2/multi-level-ca-cr-init/hosts/moon/etc/ipsec.conf
+2 -2
View File
@@ -25,12 +25,12 @@ conn alice
leftsubnet=PH_IP_ALICE/32
right=PH_IP_CAROL
[email protected]
rightca="C=CH, O=Linux strongSwan, OU=Research, CN=Research CA"
rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA"
auto=add
conn venus
leftsubnet=PH_IP_VENUS/32
right=PH_IP_DAVE
[email protected]
rightca="C=CH, O=Linux strongSwan, OU=Sales, CN=Sales CA"
rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA"
auto=add