Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 7 Nov 2000 20:15:55 -0800 (PST)
From:      Archie Cobbs <archie@dellroad.org>
To:        Brian Somers <brian@FreeBSD.org>
Cc:        cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/usr.sbin/ppp chap.c mppe.c mppe.h
Message-ID:  <200011080415.eA84FtE96239@curve.dellroad.org>
In-Reply-To: <200011072319.PAA02353@freefall.freebsd.org> "from Brian Somers at Nov 7, 2000 03:19:12 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
Brian Somers writes:
>   Introduce another global (MPPE_IsServer) so that we initiate the
>   MPPE session keys correctly.
>   
>   I'm a bit dubious about this code.  It seems that the session keys
>   are initialised differently based on whether you're the client or
>   the server.  One side is the server if it issues the first challenge,
>   but of course you can issue a challenge from both sides.... at the
>   same time.  Sounds like another wonderful M$ assumption...
>   
>   Ppp can now talk to itself correctly using encryption.
>   
>   Problem solved by:	Ustimenko Semen <semen@iclub.nsu.ru>
>   Hair torn out by:	me

I ran into the same issue with mpd. I think my conclusion was
that whoever initiated the link connection was the "client" and
the other was the "server". Most link types have a notion of
an originator and a receiver, e.g., modem, PPTP, etc., so this
generally works OK.

For link types where you can't tell, the "client" is whoever
is being authenticated.

For link types where you can't tell and both sides authenticate
each other, too bad :-)

-Archie

__________________________________________________________________________
Archie Cobbs     *     Packet Design     *     http://www.packetdesign.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200011080415.eA84FtE96239>