
|
“Big” Issues (2) Section 3.3.4 needs to be generated pending WG approval of additional use case for PKI generation of keys. Need to determine the relationship between IKE certificates, and certificates for ongoing cert management use. Closure on MUST ID fields in IKE certificates: Certificates MUST contain at least one of Subject or the SubjectAltName iPAddress, dNSName, or rfc822Name. Some question of whether or how Key_ID will be supported. Perhaps SubjectAltName otherName can support. |