Re: [IPsec] Matching certificates in IKEv2

2013-09-24 Thread Yoav Nir
On Sep 24, 2013, at 3:04 PM, Valery Smyslov sva...@gmail.com wrote: I just reread the introduction of RFC 4945 and I don't understand its purpose. So I'm not sure it should be referenced from 5996bis. Ok, if there is any disagreement about it, then I think it is better to leave it out from

Re: [IPsec] Matching certificates in IKEv2

2013-09-24 Thread Paul Hoffman
no hat On Sep 24, 2013, at 4:21 AM, Tero Kivinen kivi...@iki.fi wrote: Yaron Sheffer writes: I just reread the introduction of RFC 4945 and I don't understand its purpose. So I'm not sure it should be referenced from 5996bis. Ok, if there is any disagreement about it, then I think it is