summaryrefslogtreecommitdiff
path: root/testing/tests/swanctl/rw-eap-aka-sql-rsa/description.txt
diff options
context:
space:
mode:
Diffstat (limited to 'testing/tests/swanctl/rw-eap-aka-sql-rsa/description.txt')
-rw-r--r--testing/tests/swanctl/rw-eap-aka-sql-rsa/description.txt9
1 files changed, 9 insertions, 0 deletions
diff --git a/testing/tests/swanctl/rw-eap-aka-sql-rsa/description.txt b/testing/tests/swanctl/rw-eap-aka-sql-rsa/description.txt
new file mode 100644
index 000000000..a7410c1b6
--- /dev/null
+++ b/testing/tests/swanctl/rw-eap-aka-sql-rsa/description.txt
@@ -0,0 +1,9 @@
+At the outset the gateway authenticates itself to the client by sending an
+IKEv2 <b>RSA signature</b> accompanied by a certificate.
+The roadwarrior <b>carol</b> sets up a connection to gateway <b>moon</b>.
+<b>carol</b> uses the <i>Extensible Authentication Protocol</i>
+in association with the <i>Authentication and Key Agreement</i> protocol
+(<b>EAP-AKA</b>) to authenticate against the gateway. In this scenario,
+quintuplets from the SQL database /etc/ipsec.d/ipsec.db are used instead
+of a physical USIM card on the client <b>carol</b>. The USIM provider on
+gateway <b>moon</b> also stores the quintuplets in an SQL database.