testing/tests/ikev2/rw-sig-auth/description.txt

   1 The roadwarriors <b>carol</b> an <b>dave</b> set up a connection to gateway
   2 <b>moon</b>. They authenticate themselves using <b>RSA signatures</b> but
   3 they use different hash algorithms. <b>moon</b> uses signature scheme constraints
   4 to only allow access to the <b>research</b> and <b>accounting</b> subnets if
   5 specific algorithms are used.
   6 <p/>
   7 <b>Note:</b> Because the client certificate's are signedwith SHA-256 we have to
   8 accept that algorithm too because signature schemes in <b>rightauth</b> are also
   9 used as constraints for the whole certificate chain.
  10 Therefore, <b>carol</b> obtains access to the <b>research</b> subnet behind gateway
  11 <b>moon</b> whereas <b>dave</b> has access to the <b>accounting</b> subnet, but not
  12 vice-versa.