Hi, I am working on a use case which involves creating an IPSec tunnel between a client and a server. The client uses SCEP to generates its certificates, I am wondering what should happens at the remote end, the server. Could anyone help me find the right solution? I am thinking the following:
1. In a test environment is it ok to create a set of certificates for the Server using SCEP, what should the server certificates contain as self- identifier? Can you provide an example for the client and the server certificates, both using SCEP? 2. In a production environment, I will not have control of the remote server, how will the IPSec tunnel work with x.509 certificates, the client will have its certificates from SCEP, what about the server? Thanks, Ed
_______________________________________________ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users