[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: IKEv2 (son-of-ike) draft

To: Jan Vilhuber <vilhuber@cisco.com>
Subject: Re: IKEv2 (son-of-ike) draft
From: Derek Atkins <warlord@mit.edu>
Date: 21 Nov 2001 10:08:52 -0500
Cc: Ari Huttunen <Ari.Huttunen@f-secure.com>, Radia Perlman - Boston Center for Networking <Radia.Perlman@sun.com>, ipsec@lists.tislabs.com
In-Reply-To: Jan Vilhuber's message of "Tue, 20 Nov 2001 12:26:16 -0800 (PST)"
References: <Pine.LNX.4.21.0111201224000.8938-100000@janpc-home.cisco.com>
Sender: owner-ipsec@lists.tislabs.com

Jan Vilhuber <vilhuber@cisco.com> writes:

> round and now we can't get rid of it and even have group-keys. Gah! What's so
> hard about configuring an RSA key?

Lack of a standard way of doing it...  Do you use raw RSA N/e, PGP key
format, X.509 format?  If a certificate format (PGP/X.509/etc) what
signatures are required, if any?  IKE doesn't specify any of this, and
quite frankly a number of implementations do it differently.

-derek

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available

Follow-Ups:

Re: IKEv2 (son-of-ike) draft

From: Henry Spencer <henry@spsystems.net>

References:

Re: IKEv2 (son-of-ike) draft

From: Jan Vilhuber <vilhuber@cisco.com>

Prev by Date: Suse Linux 7.3 and VPN
Next by Date: Re: IKEv2 (son-of-ike) draft
Prev by thread: Re: IKEv2 (son-of-ike) draft
Next by thread: Re: IKEv2 (son-of-ike) draft
Index(es):
- Main
- Thread