Re: netscreen 25 sofaware ipsec interop

On Tue, Jan 06, 2004 at 10:18:54AM -0500, R. DuFresne wrote:
> how does one create a cert for a dynamic IP?

Wildcard CN, e.g.,

 Subject: C=SG, O=The Net Memetic Pte Ltd,
          CN=*.rulemaker.net/emailAddress=ngps_at_netmemetic.com

The dynamic IPs PTR back to, say, xxx.dyn-pool.example.com, and you create
certs with CN=*.dyn-pool.example.com.

Verification is entirely up to the relying application, of course.

Cheers.

-- 
Ng Pheng Siong <ngps_at_netmemetic.com> 
http://firewall.rulemaker.net -+- Firewall Change Management & Version Control
http://sandbox.rulemaker.net/ngps -+- Open Source Python Crypto & SSL
_______________________________________________
firewall-wizards mailing list
firewall-wizards_at_honor.icsalabs.com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards