(racoon 777) can I specify a gssapi_id as a unicode string?

[Nathan Herring <nathanh@microsoft.com>]

[Resending -- didn't make it to the list yesterday]

While struggling to interop with a WinXP IPsec configuration via GSS-API /
Kerberos 
<http://msdn.microsoft.com/library/default.asp?url=/library/en-us/randz/prot
ocol/ike_protocol_with_gss-api_authentication.asp>, it appears that the
Microsoft implementation of the GSS-API endpoint name is encoded in Unicode
(UTF-16, LE, no BOM). I don't know if it requires this of the other end or
not. Is there a way to specify the encoding of strings in racoon? Can racoon
handle Unicode strings in the GSS-API endpoint name? What kinds of strings
does it expect/is it capable of handling?

The other thing is that although the ISAKMP protocol has a length variable
inherent to the SA attribute, racoon posts the null terminator of the
C-style string. This seems redundant, if not actually incorrect -- the
consumer of the protocol could read the octets back into a string and
null-terminate it. Is there a specific reason why this is set up this way?

Thanks!
Nathan Herring
MacBU SDE/Dev