[Openswan Users] How to check the host identity ?

[Bryan McAninch]

My apologies, I didn't see l2tp or pptp authentication mentioned in his
original post. I thought he was simply asking how one can be certain that a
certificate authenticates a user, and not an imposter.

Cheers,

Bryan

> -----Original Message-----
> From: Colin Johnston [mailto:colinj at mx5.org.uk] 
> Sent: Thursday, May 19, 2005 10:02 AM
> To: Bryan McAninch; users at openswan.org
> Subject: Re: [Openswan Users] How to check the host identity ?
> 
> Having setup certificate based auth after configuring shared 
> secret auth I can say that you still need to configured 
> l2tp/ppp auth so hence you can be fairly sure the host is 
> correctly since they will need a valid cert and valid 
> username/passwd for the l2tp/ppp auth part.
> 
> Any good network admin would check the openswan logs for 
> valid users and also check those remote pc for virus/spyware 
> remotely and also check for unusal network patterns.
> 
> 
> Colin Johnston
> 
>