Last updated at: 2010/02/17

> Documentation :: Other

Authorization

The Anoubis-daemon can ask for a client-authorization with a cryptographic challenge-response authentication. Only if the client proves its identity with the correct key, the daemon accepts the connection. Whether the daemon requests client-authorization can be configured for the whole daemon-process.

The keypair can be configured in the SFS-options.

The command line tools anoubisctl and sfssig read $HOME/.xanoubis/default.crt (certificate) and $HOME/.xanoubis/default.key (private key) by default. Another keypair can be used with with options -c and -k.

The Anoubis-daemon rejects connections, if a client-authorization is required and the client doesn't use or uses a wrong certificate.