1
mirror of https://git.dn42.dev/wiki/wiki.git synced 2025-02-16 05:14:27 +01:00

Updated IPsecWithPublicKeys (markdown)

This commit is contained in:
dn42 wiki 2014-07-21 19:27:08 +02:00
parent e7da64542d
commit ec51c4466c

View File

@ -17,8 +17,8 @@
* Dynamic peers can all have distinct public keys and still use IKE main mode
### So why isn't everyone using public keys already?
* The various IKE implementations don't all use the same format to represent public keys _(but we can **easily** convert between them)_
* Documentation on how to, and why you should, configure public keys instead of PSKs is lacking _(which is why this page exists)_
* The various IKE implementations don't all use the same format to represent public keys _(but we can [**easily** convert](#Conversion-tool) between them)_
* Documentation on [how to](#How-To-examples), and why you should, configure public keys instead of PSKs is lacking _(which is why this page exists)_
* Some implementations don't expose the ability to use public keys directly, only allowing a choice between PSKs and X.509 certificates
### Public keys means certificates, right? Certificates are hard :(