From Bondix Wiki
SANE allows the use of certificates for authentication, both for server and client.
Client Certificate based Authentication
When certificate based client authentication is used, it is not required to explicitly create a tunnel configuration on the server.
- create server certs (./ssl/create-server-certs.sh)
- create signed client cert (./ssl/create-client-cert.sh <tunnelname>)
- set root certificate in saneserver-config
- load cert&key pair
Server Certificate Authentication
- set/create ssl cert
- load public root key from server