iOS anyconnect certificate auth?

[David Woodhouse]

> On Mon, Feb 3, 2014 at 11:14 AM, Steve <steve at thupdi.net> wrote:
>> Is it possible to let ocserv to authenticate iOS client with "auto
>> certificate" option?
>
> Could you elaborate on what is this option supposed to do?

I'd guess it lets you authenticate with a password as a one-off, and
provisons a certificate with SCEP?

>> I can connect to a ASA without any client cert
>> installed, just turn on "auto certificate".
>
> That does sound like a security issue rather than a feature.

 :)

-- 
dwmw2