Re: [Emu] RFC 7170 bis

2023-07-03 Thread Alan DeKok
On Jul 3, 2023, at 3:04 PM, Eliot Lear wrote: >> Eliot notes that you can't renew a client certificate in EAP-TLS. >> Therefore, there may be good reason to use TEAP in "client certificate only" >> mode. > > I'll just add that the current TEAP support in wpa_supplicant supports just > this

[Emu] I-D Action: draft-ietf-emu-rfc7170bis-07.txt

2023-07-03 Thread internet-drafts
A New Internet-Draft is available from the on-line Internet-Drafts directories. This Internet-Draft is a work item of the EAP Method Update (EMU) WG of the IETF. Title : Tunnel Extensible Authentication Protocol (TEAP) Version 1 Author : Alan DeKok Filename: d

Re: [Emu] RFC 7170 bis

2023-07-03 Thread Eliot Lear
On 03.07.23 19:08, Alan DeKok wrote: On Jun 27, 2023, at 7:04 PM, Joseph Salowey wrote: We are nearing completion of RFC7170bis. There are a few open issues in github - https://github.com/emu-wg/rfc7170bis/issues Issue 21 - links to the errata to verify that they have been addressed in the

Re: [Emu] RFC 7170 bis

2023-07-03 Thread Alan DeKok
On Jun 27, 2023, at 7:04 PM, Joseph Salowey wrote: > > We are nearing completion of RFC7170bis. There are a few open issues in > github - https://github.com/emu-wg/rfc7170bis/issues > > Issue 21 - links to the errata to verify that they have been addressed in the > draft and provides text fo

Re: [Emu] RFC 7170 bis

2023-07-03 Thread Alan DeKok
On Jun 29, 2023, at 10:48 AM, Eliot Lear wrote: > RFC 2315 uses the term, and I take "degenerate" here to mean that the PKCS#7 > object is not itself signed. This is how we implemented. OK. I will update doc document accordingly. Alan DeKok. __