IETF Logo Mail Archive

Re: IKEv2 (son-of-ike) draft

Derek Atkins <warlord@mit.edu> Wed, 21 November 2001 15:48 UTC

Received: from lists.tislabs.com (portal.gw.tislabs.com [192.94.214.101]) by above.proper.com (8.11.6/8.11.3) with ESMTP id fALFmf802928; Wed, 21 Nov 2001 07:48:42 -0800 (PST)
Received: by lists.tislabs.com (8.9.1/8.9.1) id JAA15881 Wed, 21 Nov 2001 09:59:32 -0500 (EST)
To: Jan Vilhuber <vilhuber@cisco.com>
Cc: Ari Huttunen <Ari.Huttunen@f-secure.com>, Radia Perlman - Boston Center for Networking <Radia.Perlman@sun.com>, ipsec@lists.tislabs.com
Subject: Re: IKEv2 (son-of-ike) draft
References: <Pine.LNX.4.21.0111201224000.8938-100000@janpc-home.cisco.com>
From: Derek Atkins <warlord@mit.edu>
Date: Wed, 21 Nov 2001 10:08:52 -0500
In-Reply-To: Jan Vilhuber's message of "Tue, 20 Nov 2001 12:26:16 -0800 (PST)"
Message-ID: <sjmbshwduuz.fsf@benjamin.ihtfp.org>
Lines: 17
X-Mailer: Gnus v5.7/Emacs 20.7
Sender: owner-ipsec@lists.tislabs.com
Precedence: bulk

Jan Vilhuber <vilhuber@cisco.com> writes:

> round and now we can't get rid of it and even have group-keys. Gah! What's so
> hard about configuring an RSA key?

Lack of a standard way of doing it...  Do you use raw RSA N/e, PGP key
format, X.509 format?  If a certificate format (PGP/X.509/etc) what
signatures are required, if any?  IKE doesn't specify any of this, and
quite frankly a number of implementations do it differently.

-derek

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available

v2.35.0 | Report a Bug | By Email | System Status