Certificates: Difference between revisions
From Bondix Wiki
No edit summary |
No edit summary |
||
| Line 1: | Line 1: | ||
[[Category:Server]] | |||
SANE allows the use of certificates for authentication, both for server and client. | SANE allows the use of certificates for authentication, both for server and client. | ||
Revision as of 13:05, 1 June 2023
SANE allows the use of certificates for authentication, both for server and client.
Client Certificate based Authentication
When certificate based client authentication is used, it is not required to explicitly create a tunnel configuration on the server.
Server Setup
- create server certs (./ssl/create-server-certs.sh)
- create signed client cert (./ssl/create-client-cert.sh <tunnelname>)
- set root certificate in saneserver-config
Client Setup
- load cert&key pair
Server Certificate Authentication
Server Setup
- set/create ssl cert
Client Setup
- load public root key from server
