|
In computing, Internet Key Exchange (IKE or IKEv2) is the protocol used to set up a security association (SA) in the IPsec protocol suite. IKE builds upon the Oakley protocol and ISAKMP.〔The Internet Key Exchange (IKE), RFC 2409, §1 Abstract 〕 IKE uses X.509 certificates for authentication - either pre-shared or distributed using DNS (preferably with DNSSEC) and a Diffie–Hellman key exchange - to set up a shared session secret from which cryptographic keys are derived.〔 〕〔 〕 In addition, a security policy for every peer which will connect must be manually maintained.〔 ==History== The Internet Engineering Task Force (IETF) originally defined IKE in November 1998 in a series of publications (Request for Comments) known as RFC 2407, RFC 2408 and RFC 2409: * RFC 2407 defined The Internet IP Security Domain of Interpretation for ISAKMP. * RFC 2408 Internet Security Association and Key Management Protocol (ISAKMP) * RFC 2409 defined The Internet Key Exchange (IKE) IKE was updated to version two (IKEv2) in December 2005 by RFC 4306. Some open details were clarified in October 2006 by RFC 4718. These two documents plus additional clarifications were combined into the updated IKEv2 RFC 5996 which was published in September 2010. A later update upgraded the document from Proposed Standard to Internet Standard, and was published as RFC 7296 in October 2014. The parent organization of the IETF, The Internet Society (ISOC), has maintained the copyrights of these standards as freely available to the Internet community. 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「internet key exchange」の詳細全文を読む スポンサード リンク
|