randy/draft-9092update
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

per ggm, unique one time EE cert, no new key needed

Browse source
This commit is contained in:
Randy Bush 2023-10-17 12:53:48 -07:00
parent 0c948f190d
commit 4db8e66cfa
1 changed files with 4 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

9
draft-ietf-opsawg-9092-update.xml
View file

@ -518,11 +518,10 @@
</t>
<t>
The CA MUST sign only one geofeed with a particular generated
private key and MUST generate a new key pair for each new
version of the geofeed. An associated EE certificate used in
this fashion is termed a "one-time- use" EE certificate (see
Section 3 of <xref target="RFC6487"/>).
The CA MUST generate a new EE certificate for each new signing
of the geofeed file. An associated EE certificate used in this
fashion is termed a "one-time- use" EE certificate (see Section
3 of <xref target="RFC6487"/>).
</t>
<t>