Re: linux-ipsec: Is there an archive and other stupid questions

On Tue, 3 Feb 1998, Al Youngwerth wrote:

> So I don't clutter up this list any further with lots of noise that I'm
> sure has been discussed before, is there an archive of this list somewhere
> that someone could point me to?

Not that I know of.

> As for dumb questions, has anyone tried to connect a win95 IPSec client to
> the linux IPSec package? For example FTP Software's IPSec client?

Nope; the project is, from what I can tell, in limbo right now. There've been rumblings of its starting back up, but nothing concrete yet.

> I'm just starting to investigate this stuff. Reading the docs and browsing
> some of the RFCs about IPSec the piece that seems to be missing for me is
> the initial authentication and key excahnge. Is there any kind of standard
> (defacto or otherwise) on how a client out on the Internet can authenticate
> with the IPSec server and then do the key exchange?

Last I looked, it was still in draft stage. Search the ID archives for the phrase "photuris". It's Diffie-Hellman PK based, similar to PGP5.

--
Todd Graham Lewis        Manager of Web Engineering    (800) 719-4664, x2804
******Linux******          MindSpring Enterprises      tlewis@mindspring.net