Re: CERT REQ payload Handling Clarification

[Brian Korver <briank@briank.com>]

Michael Richardson writes:
>   DER is a subset of BER.
>   Your parser should always expect BER.
>  
>   DER is required in certain situations, which would be well spelt out -
> typically under signatures.
> 
>   It would be nice if someone would write a seperate Informational document
> on using PKIX with IKE.

Although it doesn't answer this question (yet), the intention of
draft-ietf-ipsec-pki-profile-00.txt is to address these sorts of
issues (of which there are many).

-brian
briank@briank.com