SNIP_ADAPTIVE_CAN_FIGURE_Figure_3_94

Figure 3.94: Proxy information about the remote node in case of TLS Please note that the security of a pre-shared key as authentication in TLS protocol depends on the number of entities sharing the same key . If multiple Machines are using the same shared key , one cannot reliably distinguish between those Machines because any of them can impersonate the others. It can only be ensured that no other Machine without the knowledge of the pre-shared key can established a secure channel. The TlsIamRemoteSubject may be identified by using certificates in two ways. First, it is possible to directly specify the certificates that the TlsIamRemoteSubject may to use by referencing them and setting derivedCertificateAccepted to false. This approach requires the presence of the remote certificate on the local Machine. Secondly , by setting derivedCertificateAccepted to true it is possible to specify the Common Name (as given in the X509 Certificate) of the TlsIamRemoteSubject. In that case, the acceptedRemoteCertificates define the set of allowed root certificates for the certificate presented by the TlsIamRemoteSubject.