Firewall Wizards mailing list archives
Re: netscreen 25 sofaware ipsec interop
From: Ng Pheng Siong <ngps () netmemetic com>
Date: Sun, 11 Jan 2004 20:37:58 +0800
On Tue, Jan 06, 2004 at 10:18:54AM -0500, R. DuFresne wrote:
how does one create a cert for a dynamic IP?
Wildcard CN, e.g., Subject: C=SG, O=The Net Memetic Pte Ltd, CN=*.rulemaker.net/emailAddress=ngps () netmemetic com The dynamic IPs PTR back to, say, xxx.dyn-pool.example.com, and you create certs with CN=*.dyn-pool.example.com. Verification is entirely up to the relying application, of course. Cheers. -- Ng Pheng Siong <ngps () netmemetic com> http://firewall.rulemaker.net -+- Firewall Change Management & Version Control http://sandbox.rulemaker.net/ngps -+- Open Source Python Crypto & SSL _______________________________________________ firewall-wizards mailing list firewall-wizards () honor icsalabs com http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
Current thread:
- netscreen 25 sofaware ipsec interop Timo Proescholdt (Jan 05)
- Re: netscreen 25 sofaware ipsec interop R. DuFresne (Jan 10)
- Re: netscreen 25 sofaware ipsec interop Ng Pheng Siong (Jan 18)
- <Possible follow-ups>
- Re: netscreen 25 sofaware ipsec interop Mark . Boltz (Jan 06)
- Re: netscreen 25 sofaware ipsec interop R. DuFresne (Jan 10)