Re: [IPsec] IPsec profile feedback wanted (draft autonomic control plane)

2020-02-27 Thread Valery Smyslov
Hi Paul, > > 1. The > >Certificate Encoding "PKCS #7 wrapped X.509 certificate" (1) MUST be > >supported. See [IKEV2IANA] for this and other IANA IKEv2 parameter > >names used in this text. > > > > “PKCS #7 wrapped X.509 certificate” certificate encoding is deprecated > > and is

Re: [IPsec] IPsec profile feedback wanted (draft autonomic control plane)

2020-02-27 Thread 'Toerless Eckert'
Thanks. I think ACP has no specific encoding preference for the exchanged certificates, but we do of course MUST support BRSKI enrolled certificate (chains), and i think PKS#7 is MTI there (Michael ?). Can PKS#7 certificate chains be converted locally into any potential other possible IKEv2 suppo

Re: [IPsec] IPsec profile feedback wanted (draft autonomic control plane)

2020-02-27 Thread Valery Smyslov
Hi Toerless, > Thanks. > > I think ACP has no specific encoding preference for the > exchanged certificates, but we do of course MUST support BRSKI > enrolled certificate (chains), and i think PKS#7 is MTI there (Michael ?). > > Can PKS#7 certificate chains be converted locally into any potentia