IKE and certificates

[Holger Fahner]

Dear Azim,

> However, in this RFC I found nothing about such
> certificate verification. Is there any IPSEC RFC describing how to
> integrate
> such certificate verification with the use of IKE ? If yes can someone
> tell me which one it is?

Did you check out this Internet draft
draft-ietf-ipsec-pki-req-03.txt
"A PKIX Profile for IKE"

and the related RFC 2459
"Internet X.509 Public Key Infrastructure
Certificate and CRL Profile"

Hope, this helps.

Best regards,

Holger

--

Holger Fahner
Danet Consult GmbH
Waldburgstraße 17-19       Tel +49-(0)711-13353-83
D-70563 Stuttgart          Fax +49-(0)711-13353-53
mailto:fahner at danet-consult.de
http://www.danet-consult.de

****************************************************************
TO POST A MESSAGE on this list, send it to vpn at listserv.secnetgroup.com

The VPN FAQ (under construction) is available at
http://kubarb.phsx.ukans.edu/~tbird/vpn/FAQ.html

We are currently experiencing "unsubscribe" difficulties.  If you
wish to unsubscribe, please send a message containing the single line
"unsubscribe vpn your-e-mail-address" to owner-vpn at listserv.secnetgroup.com

****************************************************************