Re: Using TLS in the first hop - Bug in RFC 5630
Iñaki Baz Castillo <[email protected]> Fri, 16 Sep 2011 14:46:16 +0200
| Newsgroups | gmane.ietf.sip |
|---|---|
| Message-ID | <CALiegfm5YQmcruJ=0=DQEieT+h41N7ySfcR0-QgPE=avOuphBQ@mail.gmail.com> |
MjAxMS85LzE2IERSQUdFLCBLZWl0aCAoS2VpdGgpIDxrZWl0aC5kcmFnZUBhbGNhdGVsLWx1Y2Vu dC5jb20+Ogo+IFRoaXMgY29uY2x1c2lvbiBpcyBub3RoaW5nIG5ldyAtIGl0IHdhcyBlc3NlbnRp YWxseSB0aGUgY29uY2x1c2lvbiBvZiB0aG9zZSB3b3JraW5nIG9uIFJGQyA1NjMwLiBCdXQgaXQg aXMgbm90IFJGQyA1NjMwIHRoYXQgbmVlZHMgdGhlIHJld29yazsgdGhhdCBkb2N1bWVudCBpcyBw cmV0dHkgbXVjaCBjb3JyZWN0IHdpdGhpbiB0aGUgY29uc3RyYWludHMgd2UgZ2F2ZSBpdCwgd2hp Y2ggaXMgdG8gZGVmaW5lIHdoYXQgaGFwcGVucyB3aXRoIHRoZSBleGlzdGluZyBwcm90b2NvbCBh bmQgbWFrZSBtaW5pbXVtIGZpeGVzIHRvIHRoZSBleGlzdGluZyBwcm90b2NvbCAoaW5kZWVkIHRo ZSBvcmlnaW5hbCBjaGFydGVyIGl0ZW0gd2FzIG9ubHkgdGhlIGZpcnN0IGhhbGYgb2YgdGhpcyku Cj4KPiBUaGVyZSB3YXMgYSByZWNvZ25pdGlvbiB0aGF0IG1vcmUgY291bGQgYmUgYWNoaWV2ZWQg d2l0aCBhIG5ldyBtZWNoYW5pc20gKGZvciBleGFtcGxlIHRoZXJlIHdhcyBhIGRyYWZ0IGZyb20g VmlqYXkgR3VyYmFuaSksIGJ1dCB0aGF0IHdvdWxkIGhhdmUgYmVlbiBhIHNlcGFyYXRlIGNoYXJ0 ZXIgaXRlbSwgYW5kIG5vb25lIHNlZW1lZCB0byBoYXZlIHRoZSBlbnRodXNpYXNtIGF0IHRoZSB0 aW1lIHRvIHdvcmsgb24gaXQuIFRoYXQgZG9lc24ndCBtZWFuIHRoYXQgdGhhdCBzaXR1YXRpb24g c3RpbGwgcGVyc2lzdHMgYW5kIEknbSBzdXJlIHlvdSB1bmRlcnN0YW5kIHRoZSBwcm9jZXNzIGZv ciBicmluZ2luZyBuZXcgd29yayBpbnRvIElFVEYgaWYgeW91IHdhbnQgdG8gZG8gc29tZXRoaW5n LiBCdXQgdGhhdCBpcyB3aGF0IGl0IGlzLCBuZXcgd29yay4KClRoYW5rcywgSSB1bmRlcnN0YW5k IHdoYXQgeW91IG1lYW4uCgpJTUhPIHRoZSBtYWluIHByb2JsZW0gaXMgIm1peGluZyIgdGhlIHRy YW5zcG9ydCBmb3IgYSBzcGVjaWZpYyBub2RlIGluCnRoZSBwYXRoIHdpdGggdGhlIHJlcXVpcmVt ZW50IG9mIGEgc2VjdXJlIHRyYW5zcG9ydCBmb3IgdGhlIHdob2xlCnBhdGguIEdpdmVuIHRoaXMg dGhyZWFkIGlzIGNsZWFyIHRoYXQgdGhlcmUgYXJlIGVycm9ycyBpbiB0aGUgZGVzaWduCm1ha2lu ZyBpdCB1bnVzYWJsZS4KCkFub3RoZXIgImVycm9yIiAoSU1ITykgaXMgdGhlIGFpbSBvZiBSRkMg MzI2MSBpbiBjb25zaWRlcmluZyBUTFMgKG92ZXIKVENQKSBub3QgYSB0cmFuc3BvcnQsIGJ1dCBh IHNlY3VyZSBsYXllciBvdmVyIFRDUC4gQnV0IHRoYXQgaXMgaXJvbmljCnNpbmNlIHRoYXQganVz dCBhcHBsaWVzIHRvIFVSSSA7dHJhbnNwb3J0IHBhcmFtLCBidXQgaW4gVmlhIHRyYW5zcG9ydApm aWVsZCB3ZSBkbyBoYXZlICJUTFMiIGFuZCAiVENQIiBhcyBzZXBhcmF0ZSB2YWx1ZXMuCgpUaGlu Z3Mgd291bGQgYmUgbXVjaCBlYXNpZXIgYXMgZm9sbG93cyAoanVzdCBhbiBpbml0aWFsIGlkZWEp OgoKLSBDb25zaWRlciBUTFMtb3Zlci1UQ1AgYXMgYSByZWFsIHRyYW5zcG9ydCAodGhlIHNhbWUg Zm9yIFRMUyBvdmVyClNDVFApIHNvIHdlIGhhdmUgO3RyYW5zcG9ydD10bHMgLyB0bHMtc2N0cC4K Ci0gQ29tcGxldGVseSByZW1vdmUgU0lQUyBzY2hlbWEgKHRoZSByZWFsIHBhaW4gaGVyZSkuCgot IENyZWF0ZSBhbnkgbmV3IG1lY2hhbmlzbSBmb3IgcmVxdWlyaW5nIGEgd2hvbGUgc2VjdXJlIHBh dGguIEZvcgpleGFtcGxlLCBieSBhZGRpbmcgYSA7c2VjIHBhcmFtIHRvIHRoZSBSZXF1ZXN0IFVS SSBhbmQgQ29udGFjdCBVUkkuIEluCnRoaXMgd2F5LCB0aGUgVUFTIE1VU1QgYWxzbyBhZGQgO3Nl YyB0byB0aGUgQ29udGFjdCBoZWFkZXIgaW4gdGhlCnJlc3BvbnNlLCBzbyBhbGwgdGhlIGluLWRp YWxvZyByZXF1ZXN0cyB3b3VsZCBoYXZlIDtzZWMgaW4gdGhlIFJlcXVlc3QKVVJJLiAgUHJveGll cyBzaG91bGQgYWRkIDtzZWMgdG8gUmVjb3JkLVJvdXRlIGhlYWRlcnMgaW4gdGhpcyBjYXNlLgpJ ZiBhbiBVQUMgb3IgcHJveHkgaGFzIHRvIHJvdXRlIGEgcmVxdWVzdCB3aG9zZSB0b3AgUm91dGUg KG9yIFJVUkkgaWYKbm8gUm91dGUgaXMgcHJlc2VudCkgaGFzIDtzZWMgcGFyYW0sIHRoZW4gaXQg TVVTVCB1c2UgYSBzZWN1cmUKdHJhbnNwb3J0LiBJZiBzdWNoIFVSSSBjb250YWlucyBhIDt0cmFu c3BvcnQgcGFyYW0gd2l0aCB2YWx1ZXMgInVkcCIsCiJ0Y3AiIG9yICJzY3RwIiB0aGVuIHRoYXQn cyBhbiBlcnJvciBhbmQgdGhlIHJlcXVlc3Qgc2hvdWxkIGJlCnJlamVjdGVkLgpBbmQgdGhhdCdz IGFsbC4KCk9mIGNvdXJzZSB0aGlzIGlkZWEgbXVzdCBiZSBpbXByb3ZlZCAoYSBsb3QpIDopCgpS ZWdhcmRzLgoKLS0gCknDsWFraSBCYXogQ2FzdGlsbG8KPGliY0BhbGlheC5uZXQ+Cl9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fClNpcCBtYWlsaW5nIGxpc3Qg IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2lwClRoaXMgbGlzdCBpcyBl c3NlbnRpYWxseSBjbG9zZWQgYW5kIG9ubHkgdXNlZCBmb3IgZmluaXNoaW5nIG9sZCBidXNpbmVz cy4KVXNlIHNpcC1pbXBsZW1lbnRvcnNAY3MuY29sdW1iaWEuZWR1IGZvciBxdWVzdGlvbnMgb24g aG93IHRvIGRldmVsb3AgYSBTSVAgaW1wbGVtZW50YXRpb24uClVzZSBkaXNwYXRjaEBpZXRmLm9y ZyBmb3IgbmV3IGRldmVsb3BtZW50cyBvbiB0aGUgYXBwbGljYXRpb24gb2Ygc2lwLgpVc2Ugc2lw Y29yZUBpZXRmLm9yZyBmb3IgaXNzdWVzIHJlbGF0ZWQgdG8gbWFpbnRlbmFuY2Ugb2YgdGhlIGNv cmUgU0lQIHNwZWNpZmljYXRpb25zLg==