Re: [design] protocol/port in Phase 1 ID Payload must be

"D. Hugh Redelmeier" <[email protected]> Mon, 3 Nov 2003 19:40:13 -0500 (EST)

Newsgroups	gmane.network.freeswan.user,gmane.network.freeswan.devel
Message-ID	<[email protected]>

-----BEGIN PGP SIGNED MESSAGE-----


| From: Michael Richardson <[email protected]>

|   I believe that Cisco is wrong to think this, and you should report a bug.
|   However, I think that we can go with the more liberal interpretation, but
| we won't send that.

The RFC says:

   If an implementation receives any other values, this MUST be
   treated as an error and the security association setup MUST be
   aborted.  This event SHOULD be auditable.

That suggests that we should treat it as an error.  We have done so
for years.

Hugh Redelmeier
[email protected]  voice: +1 416 482-8253

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQCVAwUBP6b1cMFAuQPManGZAQG4TwP/bF6qozd1pAIy64CSX9bcmpqjwiXDq8yl
1BMOAC6Y15vybKAppm1QUurNX0UPhL7wFA5xbSjjeqcxjnPfbysliswWyfCTn76D
pclWOwOmqbEimTx9NwEeEgRMLVFGPMK6qSHu9u4pwl+NXpiHtKLNgTxI7vienA/9
uUjQw5HXgqA=
=S9YB
-----END PGP SIGNATURE-----