Re: [ovs-dev] [PATCH 2/3] ipsec: add CA-cert based authentication

2018-07-11 Thread Qiuyu Xiao
Thanks for your review! On Tue, Jul 10, 2018 at 6:16 PM, Ansis Atteka wrote: > On Wed, 27 Jun 2018 at 10:59, Qiuyu Xiao wrote: >> >> This patch adds CA-cert based authentication to the ovs-monitor-ipsec >> daemon. With CA-cert based authentication enabled, OVS approves IPsec >> tunnel if the

Re: [ovs-dev] [PATCH 2/3] ipsec: add CA-cert based authentication

2018-07-10 Thread Ansis Atteka
On Wed, 27 Jun 2018 at 10:59, Qiuyu Xiao wrote: > > This patch adds CA-cert based authentication to the ovs-monitor-ipsec > daemon. With CA-cert based authentication enabled, OVS approves IPsec > tunnel if the peer has a cert signed by a trusted CA and the identity of > the peer cert is as

Re: [ovs-dev] [PATCH 2/3] ipsec: add CA-cert based authentication

2018-06-27 Thread Qiuyu Xiao
Hi Aaron, Thanks for your comments! On Wed, Jun 27, 2018 at 1:12 PM, Aaron Conole wrote: > > Qiuyu Xiao writes: > > > This patch adds CA-cert based authentication to the ovs-monitor-ipsec > > daemon. With CA-cert based authentication enabled, OVS approves IPsec > > tunnel if the peer has a

Re: [ovs-dev] [PATCH 2/3] ipsec: add CA-cert based authentication

2018-06-27 Thread Aaron Conole
Qiuyu Xiao writes: > This patch adds CA-cert based authentication to the ovs-monitor-ipsec > daemon. With CA-cert based authentication enabled, OVS approves IPsec > tunnel if the peer has a cert signed by a trusted CA and the identity of > the peer cert is as expected. Belows are the major

[ovs-dev] [PATCH 2/3] ipsec: add CA-cert based authentication

2018-06-27 Thread Qiuyu Xiao
This patch adds CA-cert based authentication to the ovs-monitor-ipsec daemon. With CA-cert based authentication enabled, OVS approves IPsec tunnel if the peer has a cert signed by a trusted CA and the identity of the peer cert is as expected. Belows are the major changes and the reasons: 1) Added