Android VPN身份验证和加密

Question

In the Android sample VPN app ToyVpn the handshake method says "To build a secured tunnel, we should perform mutual authentication and exchange session keys for encryption."

Can anyone give or point me to some examples on how to do this?

Answer 1

Generally, not trivial. You could use SSL mutual authentication (with a client key/certificate) to achieve this. Look at OpenVPN for inspiration. If you don't know what 'mutual authentication' means, don't try to implement this, use a ready solution.