[IPsec] Certificate-related issues

[Yaron Sheffer <yaronf at checkpoint.com>]

Hi,

 

I will follow this message with 5 IKEv2-bis issues, all related to certificate handling in IKEv2. Note that these are not “PKIX issues”, none of them has anything to do with the internal format of the certificate. They all have to do with the somewhat underspecified interaction of IKEv2 with certificates.

 

We will present these issues in Hiroshima. I am posting the issues here to encourage on-list discussion before (and after) the meeting.

 

Thanks,

            Yaron