Re: [IPsec] Proposed changes to draft-ietf-ipsecme-iptfs-07

2021-03-19 Thread Christian Hopps
If there are no objections from the WG I will incorporate these changes with some edits (e.g., we refer to congestion control and non-congestion control as modes already so I'll need to change the way those are referred to, to avoid confusion with the new term "AGGFRAG mode"). Thanks, Chris. >

[IPsec] rfc8229bis missing advise on error handling in IKE_INIT

2021-03-19 Thread Paul Wouters
Hi, We have implemented TCP but are running in some issues where the RFC and the bis draft does not give us clarify. If the IKE_INIT over TCP gets back an INVALID_KE, what is supposed to happen? Is the responder expected to close the TCP session, since it never created a state for this exchang

Re: [IPsec] rfc8229bis missing advise on error handling in IKE_INIT

2021-03-19 Thread Tommy Pauly
> On Mar 19, 2021, at 12:36 PM, Paul Wouters wrote: > > > Hi, > > We have implemented TCP but are running in some issues where the RFC and > the bis draft does not give us clarify. > > If the IKE_INIT over TCP gets back an INVALID_KE, what is supposed to > happen? Is the responder expected t