[Kea-users] HA with TLS

[Stefan G. Weichinger]

Am 22.10.26 um 14:18 schrieb Francis Dupont:
> There are tools including in OpenSSL (or Botan) to check cert validity.
> About FQDN matching it is crypto-backend dependent but some are known
> to verify this.
> For the last point "cert-required" is a server side parameter (the client
> always verifies the server cert chain) defaulting to true. If you disable
> it there is no mutual authentication but encryption stays so lower security
> but still better than no security at all...

Thanks for your replies.

I should have asked better ...
I was able to solve it by trial and error now.

Still not 100% understanding how things work, though.

Especially: what runs on port 8000, what on 8005, and which part has to 
be reachable from other nodes and which (maybe) not.