![]() ![]() Support of X25519 elliptic curve DH group ( RFC 8031) and Ed25519 signatures and certificates ( RFC 8420).Support of NIST elliptic curve DH groups and ECDSA signatures and certificates (Suite B, RFC 4869).Modular plugins for crypto algorithms and relational database interfaces.Storage of RSA private keys and certificates on a smartcard ( PKCS #11 interface) or protected by a TPM 2.0.Powerful IPsec policies based on wildcards or intermediate CAs.CA management (OCSP and CRL URIs, default LDAP server).Full support of the Online Certificate Status Protocol (OCSP, RFC 2560).Retrieval and local caching of Certificate Revocation Lists via HTTP or LDAP.Use of strong signature algorithms with Signature Authentication in IKEv2 ( RFC 7427).Authentication based on X.509 certificates or preshared keys. ![]() ![]() Support of IKEv2 Multiple Authentication Exchanges ( RFC 4739).Optional relaying of EAP messages to AAA server via EAP-RADIUS plugin.Secure IKEv2 EAP user authentication (EAP-SIM, EAP-AKA, EAP-TLS, EAP-TTLS, EAP-PEAP, EAP-MSCHAPv2, etc.).Virtual IP address pool managed by IKE daemon or SQL database.XAUTH server and client functionality on top of IKEv1 Main Mode authentication. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
March 2023
Categories |