Re: Problem with SSL auth with preshared certs E120171

On Fri, Jan 17, 2014 at 3:14 PM, Stefan Küng <tortoisesvn_at_gmail.com> wrote:

> First: do not use preshared key authentication. Just don't.
> http://technet.microsoft.com/en-us/library/cc782582%28v=WS.10%29.aspx
>

Very true.

What would work is for both sides to have the other side's public
certificate. Since
public certs are already "public", you would not be leaking security
information.
This reduces the possibility of receiving a forged public certificate.

(FYI, the above is simplified for clarity. If you are interested in a
detailed
explanation, the OpenSSL website has that and much more.)

------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=3071744

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2014-01-18 00:23:58 CET