Test openssl-ikev1/ecdsa-certs

Description

The hosts carol, dave, and moon use the openssl plugin based on the OpenSSL library for all cryptographical functions.

The roadwarriors carol and dave set up a connection each to gateway moon. The authentication is based on ECDSA signatures using Elliptic Curve certificates. Upon the successful establishment of the IPsec tunnels, leftfirewall=yes automatically inserts iptables-based firewall rules that let pass the tunneled traffic. In order to test both tunnel and firewall, both carol and dave ping the client alice behind the gateway moon.

alice moon carol winnetou dave

moon

carol

dave

Back