Certificates

SANE allows the use of certificates for authentication, both for server and client.

Client Certificate based Authentication

When certificate based client authentication is used, it is not required to explicitly create a tunnel configuration on the server.

Server Setup

• create server certs (./ssl/create-server-certs.sh)
• create signed client cert (./ssl/create-client-cert.sh <tunnelname>)
• set root certificate in saneserver-config

Client Setup

• load cert&key pair

Server Certificate Authentication

Server Setup

• set/create ssl cert

Client Setup

• load public root key from server