[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

IKE and certificate chains

To: ipsec@lists.tislabs.com
Subject: IKE and certificate chains
From: "Eissa, Mohamed" <mohamed.eissa@intel.com>
Date: Fri, 24 Aug 2001 10:10:45 -0700
Sender: owner-ipsec@lists.tislabs.com

Hi,


Regarding the certificate chains within the IKE certificate payload, looks
like there are two ways to achieve this. First, the certificate encoding
field is set to "X509 Certificate" and multiple certificate payloads carry
the chain, one certificate per payload. Second, the certificate encoded
field is set to "PKCS#7 wrapper" and one payload will be used to carry the
whole chain.

Did I understood this correctly, please correct me if I am wrong; and I
would like also to know which was is getting wide acceptance and why.

Regards,

Mohamed Eissa

Prev by Date: RE: Ipsec load balancing devices - UDP-ESP impact
Next by Date: Re: Simplifying Son of IKE
Prev by thread: Re: Simplifying Son of IKE
Next by thread: RE: IKE and certificate chains
Index(es):
- Main
- Thread