RFC 5996, "Internet Key Exchange Protocol Version 2 (IKEv2)", September 2010
Note: This RFC has been obsoleted by RFC 7296Source of RFC: ipsecme (sec)
See Also: RFC 5996 w/ inline errata
Errata ID: 3036
Publication Format(s) : TEXT
Reported By: Valery Smyslov
Date Reported: 2011-11-26
Verifier Name: Sean Turner
Date Verified: 2011-11-27
Section 3.10 says:
[...] Of the notifications defined in this document, the SPI is included only with INVALID_SELECTORS and REKEY_SA.
It should say:
[...] Of the notifications defined in this document, the SPI is included only with INVALID_SELECTORS, REKEY_SA and CHILD_SA_NOT_FOUND.
Original text was carried over from RFC4306 and contradicts with the text in section 2.25, which clearly says that SPI field in CHILD_SA_NOT_FOUND notification is populated. Notification CHILD_SA_NOT_FOUND was not defined in RFC4306, and the whole section 2.25 is new to RFC5996.