[Kea-users] HA with TLS

[Francis Dupont]

There are tools including in OpenSSL (or Botan) to check cert validity.
About FQDN matching it is crypto-backend dependent but some are known
to verify this.
For the last point "cert-required" is a server side parameter (the client
always verifies the server cert chain) defaulting to true. If you disable
it there is no mutual authentication but encryption stays so lower security
but still better than no security at all...

Thanks

Francis Dupont <fdupont at isc.org>