[IPsec] Open IKEv2 errata

Tero Kivinen <kivinen@iki.fi> Tue, 18 May 2010 10:37 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Message-ID: <19442.28108.255794.859480@fireball.kivinen.iki.fi>
Date: Tue, 18 May 2010 13:37:00 +0300
From: Tero Kivinen <kivinen@iki.fi>
To: Paul Hoffman <paul.hoffman@vpnc.org>
In-Reply-To: <p06240835c81767b737a8@[10.20.30.158]>
References: <20100517204502.4A74B3A6A0A@core3.amsl.com> <4BF1AFF5.9080301@ieca.com> <p06240835c81767b737a8@[10.20.30.158]>
Cc: ipsec@ietf.org, Sean Turner <turners@ieca.com>
Subject: [IPsec] Open IKEv2 errata
Precedence: list

Paul Hoffman writes:
> In specific, it would be good if the pickier folks on this list to
> look at 2195 and see if this is really just a clarification or is a
> change that limits something we don't want to limit. Comments on any
> of the others is welcome too. 

I think the change in 2195 is ok, but unneeded, as Configuration
Attribute substructure has only on value (the field inside the
configuration attribute is called value, not values, thus
configuration attribute cannot have more than one value). So only way
to send multiple attribute values is to send multiple configuration
attribute structures inside one configuration payload.

But if someone though this is not clear enough, the change is
harmless, and can be done. 
-- 
kivinen@iki.fi

Re: [IPsec] I-D ACTION:draft-ietf-ipsecme-ikev2bi… Sean Turner
[IPsec] Open IKEv2 errata Paul Hoffman
Re: [IPsec] I-D ACTION:draft-ietf-ipsecme-ikev2bi… Paul Hoffman
Re: [IPsec] Open IKEv2 errata Yaron Sheffer
[IPsec] I-D ACTION:draft-ietf-ipsecme-ikev2bis-11… Internet-Drafts
[IPsec] Open IKEv2 errata Tero Kivinen