Hi Daniel,

Thanks for the information.

2009/9/28 Daniel Mentz
<[email protected]<danielml%[email protected]>
>

> Please explain what you mean by that. Here's a quote from strongSwan's
> feature list that might be related to this requirement.
>


I'm not even sure myself, because these are the requirements of our service
provider.

But this is what i found on the freeSwan homepage (
http://www.freeswan.org/freeswan_trees/freeswan-1.5/doc/overview.html#PKI ).

Key exchange using a PKI

The IPSEC RFCs allow key exchange based on authentication services provided
by a PKI or Public Key Infrastructure. With many vendors selling such
products and many large organisations building these infrastructures, this
will clearly be an important application of IPSEC and one Linux FreeS/WAN
will eventually support.


You might even use the native L2TP/IPsec client of Windows XP although the
> setup is a bit nasty in my opinion. It also has some (security) problems.
>

What kind of security problems?

Regards,
Stevie
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to