Subject: Re: Changes (fixes!) to racoon GSS API authentication
To: None <thorpej@shagadelic.org>
From: Jun-ichiro itojun Hagino <itojun@itojun.org>
List: tech-net
Date: 11/07/2004 22:27:46
> Hi folks...
>
> I've been exchanging mail with a Microsoft developer recently about
> racoon's GSS-API auth code, and how it doesn't interoperate with
> Windows IKE.
>
> There were really a few problems:
>
> - If the GSS ID was specified in racoon.conf, the NUL at the end of the
> C-string would erroneously be put onto the wire.
>
> - While the GSS-API-for-IKE draft specifies "Unicode" (for Windows
> compatibility), this was unfortunately a little too vague. Currently,
will you comment on it to authors of the offending internet draft?
from the current situation, using UTF16-LE (just like MS) might be an
mistake. the document is vague so we don't know what is the right
thing to do.
itojun