File:  [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / testing / tests / swanctl / multi-level-ca-l3 / description.txt
Revision 1.1.1.1 (vendor branch): download - view: text, annotated - select for diffs - revision graph
Wed Mar 17 00:20:14 2021 UTC (3 years, 4 months ago) by misho
Branches: strongswan, MAIN
CVS tags: v5_9_2p0, HEAD
strongswan 5.9.2

The VPN gateway <b>moon</b> controls the access to the hosts <b>alice</b> and
<b>venus</b> by means of two different PKIs. Access to <b>alice</b> is granted
to users presenting a certificate issued by the Levels Root CA (or any of its
intermediate CAs) whereas <b>venus</b> can only be reached with a certificate
issued by the regular strongSwan Root CA.
The roadwarriors <b>carol</b> and <b>dave</b> have certificates from the
Levels CA (actually from an second level intermediate CA) and strongSwan CA,
respectively. Therefore <b>carol</b> can access <b>alice</b> and <b>dave</b>
can reach <b>venus</b>.

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>