Re: [IPsec] Clarifications and Implementation Guidelines for using TCP Encapsulation in IKEv2 draft

2020-05-08 Thread Benjamin Kaduk
On Mon, May 04, 2020 at 09:07:08AM +0300, Valery Smyslov wrote: > Hi Ben, > > > On Wed, Apr 29, 2020 at 10:54:26PM +0300, Yoav Nir wrote: > > > [With chair hat on] > > > > > > Yes, the charter says that we are to make a guidance document. If the > > working group feels that it’s better to put the

Re: [IPsec] Matching of IKE ID on certificate subject and RDN ordering

2020-05-08 Thread Tobias Brunner
Hi Paul, > For openssl, when checking the subject of the cert, it matches in this > order. but when I generated the same certificate with nss cert-util > and re-read it back in openssl, it showed me: > > CN=server, OU="Global, Support, Services", O=Test Example, L=Brno, > ST=Moravia, C=CZ