Skip to main content
Information Security

Return to Question

re-wrote question with less awkward grammar
Source Link
Hilton D
Hilton D
  • 129
  • 1
  • 7

Does iOS use the built-in certificates to verify authenticityauthenticate peers when using ipsec VPNs?

Suppose I am setting up a ipsec vpnan IPsec VPN for Apple iOS clients to connect to. I want to perform mutual authentication, ie: I wantwith the clientrequirement that the iOS clients need to know that the server is legitlegitimate and the server needs to validate the user (either by certificate or username & password)vice-versa.

On the VPN server I createdcreate a root CA and from there issuedissue a certificate for the IPsec server cert. If I install theThe CA certcertificate is installed on the phoneiOS device.

In the case of a man-in-the-middle attack will other root CAsservers be able to impersonate my IPsec server by signingusing a certificate for my server?

Askedsigned by another way how does the Cisco / IPsec client verify the server it is connecting to if using certificatesor rogue root CA?

Does iOS use the built-in certificates to verify authenticity when using ipsec?

I am setting up a ipsec vpn for Apple iOS clients to connect to. I want to perform mutual authentication, ie: I want the client to know that the server is legit and the server needs to validate the user (either by certificate or username & password).

On the VPN server I created a root CA and from there issued a server cert. If I install the CA cert on the phone will other root CAs be able to impersonate my server by signing a certificate for my server?

Asked another way how does the Cisco / IPsec client verify the server it is connecting to if using certificates?

Does iOS use built-in certificates to authenticate peers when using ipsec VPNs?

Suppose I am setting up an IPsec VPN for Apple iOS clients with the requirement that the iOS clients need to know that the server is legitimate and vice-versa.

I create a root CA and issue a certificate for the IPsec server. The CA certificate is installed on the iOS device.

In the case of a man-in-the-middle attack will other servers be able to impersonate my IPsec server using a certificate signed by another or rogue root CA?

Source Link
Hilton D
Hilton D
  • 129
  • 1
  • 7

Does iOS use the built-in certificates to verify authenticity when using ipsec?

I am setting up a ipsec vpn for Apple iOS clients to connect to. I want to perform mutual authentication, ie: I want the client to know that the server is legit and the server needs to validate the user (either by certificate or username & password).

On the VPN server I created a root CA and from there issued a server cert. If I install the CA cert on the phone will other root CAs be able to impersonate my server by signing a certificate for my server?

Asked another way how does the Cisco / IPsec client verify the server it is connecting to if using certificates?