[Seamoby] CARD: Modification in resolution to issues #49 and #51

"James Kempf" <kempf@docomolabs-usa.com> Mon, 24 May 2004 12:42 UTC

Received: from optimus.ietf.org (www.iesg.org [132.151.1.19]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA02224 for <seamoby-archive@odin.ietf.org>; Mon, 24 May 2004 08:42:59 -0400 (EDT)
Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1BSEdL-0008GT-58 for seamoby-archive@odin.ietf.org; Mon, 24 May 2004 08:32:47 -0400
Received: (from exim@localhost) by www1.ietf.org (8.12.8/8.12.8/Submit) id i4OCWlCe031770 for seamoby-archive@odin.ietf.org; Mon, 24 May 2004 08:32:47 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1BSETW-0006w4-Pu for seamoby-web-archive@optimus.ietf.org; Mon, 24 May 2004 08:22:38 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA01248 for <seamoby-web-archive@ietf.org>; Mon, 24 May 2004 08:22:36 -0400 (EDT)
Received: from ietf-mx.ietf.org ([132.151.6.1] helo=ietf-mx) by ietf-mx with esmtp (Exim 4.32) id 1BSETV-0001q2-JX for seamoby-web-archive@ietf.org; Mon, 24 May 2004 08:22:37 -0400
Received: from exim by ietf-mx with spam-scanned (Exim 4.12) id 1BSESI-0001PJ-00 for seamoby-web-archive@ietf.org; Mon, 24 May 2004 08:21:23 -0400
Received: from [65.246.255.50] (helo=mx2.foretec.com) by ietf-mx with esmtp (Exim 4.12) id 1BSER9-0000nM-02 for seamoby-web-archive@ietf.org; Mon, 24 May 2004 08:20:11 -0400
Received: from optimus22.ietf.org ([132.151.6.22] helo=optimus.ietf.org) by mx2.foretec.com with esmtp (Exim 4.24) id 1BSEFX-0007tX-Td for seamoby-web-archive@ietf.org; Mon, 24 May 2004 08:08:12 -0400
Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1BSE7y-0003WQ-SF; Mon, 24 May 2004 08:00:22 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1BSDyL-0001qb-69 for seamoby@optimus.ietf.org; Mon, 24 May 2004 07:50:25 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA29027 for <seamoby@ietf.org>; Mon, 24 May 2004 07:50:23 -0400 (EDT)
Received: from ietf-mx.ietf.org ([132.151.6.1] helo=ietf-mx) by ietf-mx with esmtp (Exim 4.32) id 1BSDyK-0006pK-7G for seamoby@ietf.org; Mon, 24 May 2004 07:50:24 -0400
Received: from exim by ietf-mx with spam-scanned (Exim 4.12) id 1BSDxO-0006WP-00 for seamoby@ietf.org; Mon, 24 May 2004 07:49:26 -0400
Received: from key1.docomolabs-usa.com ([216.98.102.225] helo=fridge.docomolabs-usa.com ident=fwuser) by ietf-mx with esmtp (Exim 4.12) id 1BSDwe-0006DZ-00 for seamoby@ietf.org; Mon, 24 May 2004 07:48:40 -0400
Message-ID: <000501c44184$fc076c90$336115ac@dcml.docomolabsusa.com>
From: "James Kempf" <kempf@docomolabs-usa.com>
To: <seamoby@ietf.org>
Date: Sun, 23 May 2004 16:54:13 -0700
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Content-Transfer-Encoding: 7bit
Subject: [Seamoby] CARD: Modification in resolution to issues #49 and #51
Sender: seamoby-admin@ietf.org
Errors-To: seamoby-admin@ietf.org
X-BeenThere: seamoby@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/seamoby>, <mailto:seamoby-request@ietf.org?subject=unsubscribe>
List-Id: Context Transfer, Handoff Candidate Discovery, and Dormant Mode Host Alerting <seamoby.ietf.org>
List-Post: <mailto:seamoby@ietf.org>
List-Help: <mailto:seamoby-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/seamoby>, <mailto:seamoby-request@ietf.org?subject=subscribe>
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on ietf-mx.ietf.org
X-Spam-Status: No, hits=0.4 required=5.0 tests=AWL,DATE_IN_PAST_06_12 autolearn=no version=2.60
Content-Transfer-Encoding: 7bit
Content-Transfer-Encoding: 7bit

It turns out there are some constraints imposed on the resolution of issues
#49 and #51 by the fact that CARD messages are sent as options on Neighbor
Discovery in IPv6, or Mobile IPv4 ICMP messages in IPv4. These constraints
require modification to the recommended resolutions as follows:

issue-#49: Length indicator for Router Certificate sub-option:

The recommended resolution was to change all field lengths to 16 bits with
units of octets, rather than 8 bits with units of 8 octets. It turns out
that the length field is constrained by the ND options TLD format to be 8
bits with units of octets, allowing a maximum of about 2K octets. This is
not long enough for a general certificate chain. Most X.509 certs are rather
long, typically on the order of about 1K, so more than on cert is unlikely
to fit into a message.

The following is a modification of the resolution to meet these constraints:

- Change the Router Certificate suboption length units to 8 octets.

- Drop the Context ID and require only a Address Option and L2-ID option in
a message with a certificate.

- If more than one certificate is required, the router sends multiple CARD
Reply Messages.

- Add a flag indicating if the certificate is the last one to be sent. The
host should be able to deduce this by whether the chain is complete.

In addtion, the following modification is advisable, since X.500 names used
for certificates can be long:

- Modify the units for the Trusted Anchor option from octets to 8 octets.

issue-#51: Version number needed.

The TLV format of the ND options won't allow the version number to be put
into the lower bits of the option type, since the type is assigned by IANA.

The following is a modification of the resolution to meet these constraints;

- Put the 3 bit version number immediately after the T and L fields, which
are specified by RFC 2461.

Comments?

            jak




_______________________________________________
Seamoby mailing list
Seamoby@ietf.org
https://www1.ietf.org/mailman/listinfo/seamoby