Tobias Brunner
5ef10ec326
Mainly to test TKM's ability for handling multiple CAs and that the received intermediate CA certificates are passed in the right order. But also added a regular scenario where two intermediate CA certificates are sent by one of the clients.
10 lines
606 B
Plaintext
10 lines
606 B
Plaintext
The VPN gateway <b>moon</b> controls the access to the hosts <b>alice</b> and
|
|
<b>venus</b> by means of two different PKIs. Access to <b>alice</b> is granted
|
|
to users presenting a certificate issued by the Levels Root CA (or any of its
|
|
intermediate CAs) whereas <b>venus</b> can only be reached with a certificate
|
|
issued by the regular strongSwan Root CA.
|
|
The roadwarriors <b>carol</b> and <b>dave</b> have certificates from the
|
|
Levels CA (actually from an second level intermediate CA) and strongSwan CA,
|
|
respectively. Therefore <b>carol</b> can access <b>alice</b> and <b>dave</b>
|
|
can reach <b>venus</b>.
|