On Thu, Nov 11, 2004 at 03:05:22PM +0100, Frank Fischer wrote:
>
> One more line on H.235 ... There is no such thing as ONE H.235
> implementation method but some different methods to do H.235 authentication.
> In 2.0.9 there is a H.235 method called "Baseline Sercurity Profil" (see
> Annex D) implemented.
> But: Don't believe Recommendations are Standard - some of them, especially
> in H.323 are formulated that open (could, should instead of need, must) that
> there are possibly as much different implementations as developers working
> on it ... sounds funny, but might get very close to the reality :-(
hi there,
now i got an answer from innovaphone. i sent my gatekeeper logs and the
traces from the ip200 (from gnugk v2.0.9-cvs, pwlib v1.8.1, openh323
v1.15.1).
the answer was german, sorry for bad translation:
we have analyse your traces. we send a correct h.235 authentification and
the gatekeeper send no correct authentification back. the authentification
mechanism from h.235 is symetric, so the gatekeeper must register also at
the ip200 - but it dont do that. thats the reason why we ignore the
registrationconfirm. and we must ignore it to avoid man-in-the-middle-attack.
the method of authentification is given with rrq, so the gatekeeper cant
do anything else. greetings from innovaphone. christoph kuenkel.
is this correct? is this a bug of the gatekeeper?
regards
thomas
--
thomas balsfulland tbals@xxxxxxxxx
zwischen mut und dummheit liegt nur ein grat
der sich durch das vorbereitetsein unterscheidet
-------------------------------------------------------
This SF.Net email is sponsored by: InterSystems CACHE
FREE OODBMS DOWNLOAD - A multidimensional database that combines
robust object and relational technologies, making it a perfect match
for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8
_______________________________________________________
List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Homepage: http://www.gnugk.org/
