> On Mon, Feb 3, 2014 at 11:14 AM, Steve <steve at thupdi.net> wrote: >> Is it possible to let ocserv to authenticate iOS client with "auto >> certificate" option? > > Could you elaborate on what is this option supposed to do? I'd guess it lets you authenticate with a password as a one-off, and provisons a certificate with SCEP? >> I can connect to a ASA without any client cert >> installed, just turn on "auto certificate". > > That does sound like a security issue rather than a feature. :) -- dwmw2