[Openswan Users] Openswan with X.509 signed by different CAs

Jacco de Leeuw jacco2 at dds.nl
Wed Dec 8 00:20:42 CET 2004


WADA Masahiro wrote:

> However I could connet between WindowsXP and WindowsXP
> using the certificates signed by different CAs.

If I remember correctly, the Microsoft documentation says that
both sides MUST be using certificates from the same CA. So I
cannot explain wthis because it should not work. Unless you are a
third-party IPsec client and not the native IPsec implementation?

Jacco
-- 
Jacco de Leeuw                         mailto:jacco2 at dds.nl
Zaandam, The Netherlands           http://www.jacco2.dds.nl


More information about the Users mailing list