Annotation of embedaddon/strongswan/testing/tests/ikev2/two-certs/description.txt, revision 1.1.1.1
1.1 misho 1: The roadwarrior <b>carol</b> possesses two different X.509 certificates plus
2: matching RSA private keys. With the first certificate <b>carol</b> authenticates
3: a tunnel connection to gateway <b>moon</b> in order to reach client <b>alice</b>
4: and presents the second certificate in order to reach client <b>venus</b> using
5: the identity <b>carol@strongswan.org</b> for both IKE security associations.
6: Therefore the RSA signature verification process on <b>moon</b> tries all
7: candidate peer certificates until it finds the correct RSA public key.
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>