> does anyone know, if KAME is capable of using certificates (x.501)?
> If yes, is it already integrated in NetBSD 1.5.2?

The IKE daemon "racoon" from the KAME project does indeed support
X.509 certificates for authentication.  See

	http://www.kame.net/newsletter/20001119b/

"Racoon" is part of NetBSD -current, but for 1.5.2 you'll need to
install the package "pkgsrc/security/racoon".

David S.

>