From: Andreas Steffen Date: Mon, 16 Aug 2010 15:29:20 +0000 (+0200) Subject: changed ikev2/rw-eap-ttls-only description X-Git-Tag: 4.5.0~476 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=f2b9b9725c4c2d662de3d89b4eb50772d2a1c965;p=thirdparty%2Fstrongswan.git changed ikev2/rw-eap-ttls-only description --- diff --git a/testing/tests/ikev2/rw-eap-ttls-only/description.txt b/testing/tests/ikev2/rw-eap-ttls-only/description.txt index b3e0450a41..702598e725 100644 --- a/testing/tests/ikev2/rw-eap-ttls-only/description.txt +++ b/testing/tests/ikev2/rw-eap-ttls-only/description.txt @@ -1,4 +1,6 @@ -The roadwarrior carol sets up a connection to gateway moon. -The strong mutual authentication of both peers is based on EAP-TLS only -(without a separate IKEv2 authentication), using TLS client and server certificates, -respectively. +The roadwarriors carol and dave set up a connection each to gateway moon. +The strong mutual authentication is based on EAP-TTLS only (without a separate IKEv2 +authentication) with the gateway being authenticated by a server certificate during the +EAP-TLS tunnel setup (phase1 of EAP-TTLS). This tunnel protects the ensuing weak client +authentication based on EAP-MD5 (phase2 of EAP-TTLS). carol presents the +correct MD5 password and succeeds whereas dave chooses the wrong password and fails.