channel bindings and address types
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

channel bindings and address types



I'm working on GS2 and thinking about how the GSS-CHANNEL-BINDING
structure should be used.  In particular, I'm thinking of how to set the
address type fields in an implementation, quoting RFC 5554:

GSS-CHANNEL-BINDINGS ::= SEQUENCE {
              initiator-address-type  INTEGER,      -- See RFC2744
              initiator-address       OCTET STRING, -- See RFC2744
              acceptor-address-type   INTEGER,      -- See RFC2744
              acceptor-address        OCTET STRING, -- See RFC2744
              application-data        OCTET STRING  -- See RFC5056
      }

The values for the initiator-address-type and acceptor-address-type
fields are specified Appendix A of RFC 2744.  However, that is C
specific.  I can't find anything in RFC 2743 about the address types.
As far as I can tell, RFC 5554 does not improve this situation?

The conclusion appears to be that there are no implementation-agnostic
definition of the address type values?

I suggest we update RFC 2743/5554 and define symbols for GSS_C_AF_INET
etc in a implementation independent way.

Further, there are no address type value allocated for IPv6 address as
far as I can see?

I think SCRAM/GS2 needs to be able to support IPv6 end points.

/Simon

Note: Messages sent to this list are the opinions of the senders and do not imply endorsement by the IETF.