[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: fqdn and trailing dot in IDs

To: Tero Kivinen <kivinen@ssh.fi>
Subject: Re: fqdn and trailing dot in IDs
From: Ricky Charlet <rcharlet@redcreek.com>
Date: Tue, 14 Dec 1999 15:48:38 -0800
CC: ipsec <ipsec@lists.tislabs.com>
Organization: RedCreek Communications Inc.
References: <3856A444.340C3A46@redcreek.com> <199912142207.AAA24637@torni.ssh.fi>
Sender: owner-ipsec@lists.tislabs.com

Tero Kivinen wrote:
> 
> Ricky Charlet writes:
> >       So when we use a FQDN as a name to Identify an endpoint, do we require
> > and/or enforce that the 'trailing dot' be applied?
> 
> No, you never put that trailing dot to the FQDN in the IKE. The DOI
> says:
> ----------------------------------------------------------------------
> 4.6.2.3 ID_FQDN
> 
>    The ID_FQDN type specifies a fully-qualified domain name string.  An
>    example of a ID_FQDN is, "foo.bar.com".  The string should not
>    contain any terminators.
> ----------------------------------------------------------------------


	Well alrighty then! That is about as clear as it gets and I'm sorry I
missed it before I posted.


-- 
####################################
#  Ricky Charlet
#	(510) 795-6903
#	rcharlet@redcreek.com
####################################

References:

fqdn and trailing dot in IDs

From: Ricky Charlet <rcharlet@redcreek.com>

fqdn and trailing dot in IDs

From: Tero Kivinen <kivinen@ssh.fi>

Prev by Date: Re: PGP keys in IKE
Next by Date: Re: PGP keys in IKE
Prev by thread: fqdn and trailing dot in IDs
Next by thread: security gateways with different policies
Index(es):
- Main
- Thread