(racoon 777) can I specify a gssapi_id as a unicode string?
Nathan Herring <[email protected]> Wed, 22 Sep 2004 17:42:06 -0700
| Newsgroups | gmane.network.ipv6.kame.racoon |
|---|---|
| Message-ID | <BD7769EE.1E7CE%[email protected]> |
[Resending -- didn't make it to the list yesterday] While struggling to interop with a WinXP IPsec configuration via GSS-API / Kerberos <http://msdn.microsoft.com/library/default.asp?url=/library/en-us/randz/prot ocol/ike_protocol_with_gss-api_authentication.asp>, it appears that the Microsoft implementation of the GSS-API endpoint name is encoded in Unicode (UTF-16, LE, no BOM). I don't know if it requires this of the other end or not. Is there a way to specify the encoding of strings in racoon? Can racoon handle Unicode strings in the GSS-API endpoint name? What kinds of strings does it expect/is it capable of handling? The other thing is that although the ISAKMP protocol has a length variable inherent to the SA attribute, racoon posts the null terminator of the C-style string. This seems redundant, if not actually incorrect -- the consumer of the protocol could read the octets back into a string and null-terminate it. Is there a specific reason why this is set up this way? Thanks! Nathan Herring MacBU SDE/Dev