title: ssh tunneling with certification: how?
body: <p>I have been through some basics about setting up SSH tunneling via e.g., putty. 
  One question: how to let the two SSH ends authenticate each other based on certificate?
  For example, using SSH tunneling for remote VNC access... </p>
  
  <pre><code>VNC == SSH (A) ===== SSH (B) === VNC 
  </code></pre>
  
  <p>I want A and B to authenticate each other. It is arguable that VNC could have its own password for protection. But that is not the point here. I could have many apps running on A and B that are not necessarily having usr/pwd protection.</p>
  
  <p>I check the putty config, seems no option for using certificate. Someone suggests stunnel, but I would like to see if doable using SSH directly. Thanks for the suggestion.</p>