8 lines
541 B
Plaintext
8 lines
541 B
Plaintext
The roadwarrior <b>carol</b> possesses two different X.509 certificates plus
|
|
matching RSA private keys. With the first certificate <b>carol</b> authenticates
|
|
a tunnel connection to gateway <b>moon</b> in order to reach client <b>alice</b>
|
|
and presents the second certificate in order to reach client <b>venus</b> using
|
|
the identity <b>carol@strongswan.org</b> for both IKE security associations.
|
|
Therefore the RSA signature verification process on <b>moon</b> tries all
|
|
candidate peer certificates until it finds the correct RSA public key.
|