<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<META content="MSHTML 6.00.2800.1479" name=GENERATOR></HEAD>
<BODY style="FONT: 10pt Verdana; COLOR: #000000" leftMargin=5 topMargin=5>
<DIV>Hello there</DIV>
<DIV> </DIV>
<DIV>I am currently trying to establish a connection using x.509 Certificates,
and I </DIV>
<DIV>seem to do something wrong.</DIV>
<DIV> </DIV>
<DIV>I think I may have missunderstood the basic principles. Please read
on</DIV>
<DIV>to see if I got it right ;)</DIV>
<DIV> </DIV>
<DIV>Lets say we have a VPN-server (listening for incoming connections) and
a</DIV>
<DIV>client (innitiating the connection).</DIV>
<DIV> </DIV>
<DIV>In order to use x.509 to authenticate and encrypt the connection,
both</DIV>
<DIV>sides need to have a Certificate from a CA both know, right?</DIV>
<DIV> </DIV>
<DIV>Now comes the part I am unsure about:</DIV>
<DIV>Do both ends have to use the same Cerftificate, or is it enough when</DIV>
<DIV>both sides have a Certificate which is signed by the above CA?</DIV>
<DIV> </DIV>
<DIV>I read tons of HowTos and Documents, but I just could not find</DIV>
<DIV>a simple discreption of the Authentication-Process. I don't even
know</DIV>
<DIV>who transfers his Public-Key first, the Client or the Server. A good
link</DIV>
<DIV>describing this process would be very very helpful. </DIV>
<DIV> </DIV>
<DIV>Thank you for your time.</DIV>
<DIV> </DIV>
<DIV>T. Henneberger</DIV>
<DIV> </DIV></BODY></HTML>