From nobody Tue Mar 14 07:00:01 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B385512943F for ; Thu, 9 Mar 2017 02:43:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.721 X-Spam-Level: X-Spam-Status: No, score=-2.721 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=inbox.lv Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yD_H3htuunZ7 for ; Thu, 9 Mar 2017 02:43:40 -0800 (PST) Received: from shark3.inbox.lv (shark3.inbox.lv [194.152.32.83]) (using TLSv1.1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A75612945B for ; Thu, 9 Mar 2017 02:43:39 -0800 (PST) Received: from shark3.inbox.lv (localhost [127.0.0.1]) by shark3-out.inbox.lv (Postfix) with ESMTP id 4C9EC280342 for ; Thu, 9 Mar 2017 12:43:37 +0200 (EET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=inbox.lv; s=30062014; t=1489056217; bh=3dnEY4rJXEgf3gGL7aWRNcw531eFy2hxr13xUq6ECyA=; l=225; h=To:From:Subject:Date; b=XEWQQbJyBpWsmfwSy9XuObsaAg/4dxNVOXsIPXQZEJIjUS08ygEyRxunKtA0mEtej saZlqcm3TUeoRyO1HikHk7a33H0axAWPj9KmaJbJtIVx82xej1QocJVScQLLHrZqlw p68lban4g/2lKIXxbBcnHz4WeE4bfuTQZ//MdfLo= Received: from mail.inbox.lv (pop1 [10.0.1.111]) by shark3-in.inbox.lv (Postfix) with ESMTP id 38FF8280322 for ; Thu, 9 Mar 2017 12:43:37 +0200 (EET) Received: from [192.168.1.20] (242.11.168.213.sta.estpak.ee [213.168.11.242]) (Authenticated sender: pkix@inbox.lv) by mail.inbox.lv (Postfix) with ESMTPSA id 1955A17835 for ; Thu, 9 Mar 2017 12:43:36 +0200 (EET) To: pkix@ietf.org From: pkix Message-ID: Date: Thu, 9 Mar 2017 12:43:31 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.7.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: OK X-ESPOL: EZeEAiZdhQAmtcK/KJpt4ev6x9etVF4hoUWJw7wsiwZUt7DEsdl2eWedGZicag/MBw== Archived-At: X-Mailman-Approved-At: Tue, 14 Mar 2017 06:59:59 -0700 Subject: [pkix] What is certificate issuance? X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Mar 2017 10:43:47 -0000 Hello, The term "issuance" is used throughout the standards, but is nowhere defined (can you prove me wrong?). At what point does the certificate gets issued? What distinguishes issued certificate from non-issued? From nobody Tue Mar 14 07:02:11 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3CAB124231 for ; Tue, 14 Mar 2017 07:02:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ju-_jMbmHZYq for ; Tue, 14 Mar 2017 07:02:09 -0700 (PDT) Received: from mail-ot0-x233.google.com (mail-ot0-x233.google.com [IPv6:2607:f8b0:4003:c0f::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1AA5512422D for ; Tue, 14 Mar 2017 07:02:09 -0700 (PDT) Received: by mail-ot0-x233.google.com with SMTP id x37so136588944ota.2 for ; Tue, 14 Mar 2017 07:02:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=tbiJteenzO5CIcns3NdkYUh1TJFODajnWhCkqxs0ojw=; b=dLWFK14zuDlVDz59ebwkVwX7WSqszor4IFPlF+fvIY3aD+8QAzM+H0HtLS4PcYLOPn A886xlHOEfjwrLutQZfsGtiXHQoLAxSL8Vuht6vZiHW8FTCN038q3YOopucJb2NUBq/x cNklK0hmwnieDglTtPaQIFCfW8wZWwUXPWe1jlV7v9CRlVWiMZQoiVyFboK13Yn01KCt d3Npm9JR1WHQ+5dMJxEl+fr8X1nh9YnPPH52zhWzV2j+SOIsh4y23QLoelTbSKCYrFlC A5XhzDRVfnWUJ9pl5YQsc1VcUNxTAT9bNCkc3a/nW19c0EbUpgh/MO+PH3upVnqNElFb ex0w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=tbiJteenzO5CIcns3NdkYUh1TJFODajnWhCkqxs0ojw=; b=msW1WBBhU7ptZEQt8hZw30k6WZQpLE8U324vYVhmwkbZvKMKWP8jfMd3sg3hWjIbyo b7Eta74t7bjWreIzh3u3TRgVOpjZPxJMJ2gfCdchOGwxMgeJF7unxKzpZT9xknbB3Akx N2++LfI3Z+9a+I8ejquZ9zNao7VUw+RmF5H/YkGPDSSV60nglWXnyGBA24May6Xyd/03 +vhAx1alooa/8IKT1NB+cSgvWBjpkUK3MhC/9jPNhrFBVnTVcCuTKYPNTyl4qF2Rp60A tftbMgREfeRsQrGJdDg0h1v7pB0+imTKIhtUG21GJ3roR23giTvFlGTBX63Oc5aRy67L 4FAg== X-Gm-Message-State: AMke39mGYbjJRVb1iFlWcDCmNYXrDUIPQqt2leUcwIcnnrRBCPbK3XeSjFSVT8ZfGVVlxyA4eaj+nVPWTSVUew== X-Received: by 10.157.8.98 with SMTP id 89mr22232109oty.264.1489500128450; Tue, 14 Mar 2017 07:02:08 -0700 (PDT) MIME-Version: 1.0 Received: by 10.157.46.116 with HTTP; Tue, 14 Mar 2017 07:02:07 -0700 (PDT) In-Reply-To: References: From: Peter Bowen Date: Tue, 14 Mar 2017 07:02:08 -0700 Message-ID: To: pkix Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: "" Subject: Re: [pkix] What is certificate issuance? X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Mar 2017 14:02:10 -0000 On Thu, Mar 9, 2017 at 2:43 AM, pkix wrote: > The term "issuance" is used throughout the standards, > but is nowhere defined (can you prove me wrong?). > > At what point does the certificate gets issued? > > What distinguishes issued certificate from non-issued? My personal answer is the action of signing the certificate is _issuance_. A non-issued certificate is one that does not have a valid signature. From nobody Tue Mar 14 07:04:24 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 716831287A5 for ; Tue, 14 Mar 2017 07:04:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M7e3MsbsbV_w for ; Tue, 14 Mar 2017 07:04:17 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 90DBC12879E for ; Tue, 14 Mar 2017 07:04:16 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id E3F5E3004AE for ; Tue, 14 Mar 2017 10:04:15 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id SYzesbenl0tj for ; Tue, 14 Mar 2017 10:04:15 -0400 (EDT) Received: from a860b60074bd.home (pool-108-45-101-150.washdc.fios.verizon.net [108.45.101.150]) by mail.smeinc.net (Postfix) with ESMTPSA id 0BCD730009D; Tue, 14 Mar 2017 10:04:15 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 10.2 \(3259\)) From: Russ Housley In-Reply-To: Date: Tue, 14 Mar 2017 10:04:17 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <5B32135C-AC86-49A8-A342-6B9C635FDB49@vigilsec.com> References: To: pkix X-Mailer: Apple Mail (2.3259) Archived-At: Cc: IETF PKIX Subject: Re: [pkix] What is certificate issuance? X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Mar 2017 14:04:23 -0000 > On Mar 9, 2017, at 5:43 AM, pkix wrote: >=20 > Hello, >=20 > The term "issuance" is used throughout the standards, > but is nowhere defined (can you prove me wrong?). >=20 > At what point does the certificate gets issued? >=20 > What distinguishes issued certificate from non-issued? A certificate is issued at the time a CA applies the signature. Next, = the certificate is published. Russ From nobody Sun Mar 19 13:39:15 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2122E12751F for ; Fri, 17 Mar 2017 04:41:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2m79MhEk0NNu for ; Fri, 17 Mar 2017 04:40:59 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C1E3E126DEE for ; Fri, 17 Mar 2017 04:40:59 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 8B841B80DFD; Fri, 17 Mar 2017 04:40:46 -0700 (PDT) To: rhousley@rsasecurity.com, wford@verisign.com, wpolk@nist.gov, dsolo@alum.mit.edu, stephen.farrell@cs.tcd.ie, Kathleen.Moriarty.ietf@gmail.com, kent@bbn.com, stefan@aaa-sec.com X-PHP-Originating-Script: 30:errata_mail_lib.php From: RFC Errata System Cc: rick@openfortress.nl, pkix@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain@rfc-editor.org;, charset=UTF-8@rfc-editor.org Message-Id: <20170317114046.8B841B80DFD@rfc-editor.org> Date: Fri, 17 Mar 2017 04:40:46 -0700 (PDT) Archived-At: X-Mailman-Approved-At: Sun, 19 Mar 2017 13:39:14 -0700 Subject: [pkix] [Technical Errata Reported] RFC3280 (4972) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Mar 2017 11:41:01 -0000 The following errata report has been submitted for RFC3280, "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata_search.php?rfc=3280&eid=4972 -------------------------------------- Type: Technical Reported by: Rick van Rein Section: 4.2.1.5 Original Text ------------- id-ce-certificatePolicies OBJECT IDENTIFIER ::= { id-ce 32 } anyPolicy OBJECT IDENTIFIER ::= { id-ce-certificate-policies 0 } Corrected Text -------------- id-ce-certificatePolicies OBJECT IDENTIFIER ::= { id-ce 32 } anyPolicy OBJECT IDENTIFIER ::= { id-ce-certificatePolicies 0 } Notes ----- The ASN.1 did not compile due to a missing identifier. The corrected text does also occur in A.2. Instructions: ------------- This erratum is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party can log in to change the status and edit the report, if necessary. -------------------------------------- RFC3280 (draft-ietf-pkix-new-part1-12) -------------------------------------- Title : Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile Publication Date : April 2002 Author(s) : R. Housley, W. Polk, W. Ford, D. Solo Category : PROPOSED STANDARD Source : Public-Key Infrastructure (X.509) Area : Security Stream : IETF Verifying Party : IESG From nobody Sun Mar 19 14:25:39 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B42C129405 for ; Sun, 19 Mar 2017 14:25:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sgUesS491ND3 for ; Sun, 19 Mar 2017 14:25:36 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 40DAE120725 for ; Sun, 19 Mar 2017 14:25:36 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 6728B3004CC for ; Sun, 19 Mar 2017 17:25:35 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id o8cEteGXRw_K for ; Sun, 19 Mar 2017 17:25:33 -0400 (EDT) Received: from a860b60074bd.home (pool-108-45-101-150.washdc.fios.verizon.net [108.45.101.150]) by mail.smeinc.net (Postfix) with ESMTPSA id A88693001A6; Sun, 19 Mar 2017 17:25:32 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 10.2 \(3259\)) From: Russ Housley In-Reply-To: <20170317114046.8B841B80DFD@rfc-editor.org> Date: Sun, 19 Mar 2017 17:25:36 -0400 Cc: Stephen Farrell , Kathleen Moriarty , Stefan Santesson Content-Transfer-Encoding: quoted-printable Message-Id: <35DD73B0-433E-4F4A-AD42-37D728D78291@vigilsec.com> References: <20170317114046.8B841B80DFD@rfc-editor.org> To: RFC Editor , IETF PKIX , rick@openfortress.nl X-Mailer: Apple Mail (2.3259) Archived-At: Subject: Re: [pkix] [Technical Errata Reported] RFC3280 (4972) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 19 Mar 2017 21:25:38 -0000 RFC 3280 is obsoleted by RFC 5280. This is correct in RFC 5280, so the = error has already been fixed. Russ > On Mar 17, 2017, at 7:40 AM, RFC Errata System = wrote: >=20 > The following errata report has been submitted for RFC3280, > "Internet X.509 Public Key Infrastructure Certificate and Certificate = Revocation List (CRL) Profile". >=20 > -------------------------------------- > You may review the report below and at: > http://www.rfc-editor.org/errata_search.php?rfc=3D3280&eid=3D4972 >=20 > -------------------------------------- > Type: Technical > Reported by: Rick van Rein >=20 > Section: 4.2.1.5 >=20 > Original Text > ------------- > id-ce-certificatePolicies OBJECT IDENTIFIER ::=3D { id-ce 32 } >=20 > anyPolicy OBJECT IDENTIFIER ::=3D { id-ce-certificate-policies 0 } >=20 > Corrected Text > -------------- > id-ce-certificatePolicies OBJECT IDENTIFIER ::=3D { id-ce 32 } >=20 > anyPolicy OBJECT IDENTIFIER ::=3D { id-ce-certificatePolicies 0 } >=20 > Notes > ----- > The ASN.1 did not compile due to a missing identifier. The corrected = text does also occur in A.2. >=20 > Instructions: > ------------- > This erratum is currently posted as "Reported". If necessary, please > use "Reply All" to discuss whether it should be verified or > rejected. When a decision is reached, the verifying party =20 > can log in to change the status and edit the report, if necessary.=20 >=20 > -------------------------------------- > RFC3280 (draft-ietf-pkix-new-part1-12) > -------------------------------------- > Title : Internet X.509 Public Key Infrastructure = Certificate and Certificate Revocation List (CRL) Profile > Publication Date : April 2002 > Author(s) : R. Housley, W. Polk, W. Ford, D. Solo > Category : PROPOSED STANDARD > Source : Public-Key Infrastructure (X.509) > Area : Security > Stream : IETF > Verifying Party : IESG >=20 > _______________________________________________ > pkix mailing list > pkix@ietf.org > https://www.ietf.org/mailman/listinfo/pkix From nobody Mon Mar 20 13:10:10 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 26C3E12762F for ; Mon, 20 Mar 2017 13:10:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.421 X-Spam-Level: X-Spam-Status: No, score=-6.421 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_SORBS_SPAM=0.5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TlPtcgFDcl08 for ; Mon, 20 Mar 2017 13:10:04 -0700 (PDT) Received: from smtpde01.smtp.sap-ag.de (smtpde01.smtp.sap-ag.de [155.56.68.170]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 74C0A1274D2 for ; Mon, 20 Mar 2017 13:10:04 -0700 (PDT) Received: from mail07.wdf.sap.corp (mail04.sap.corp [194.39.131.56]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtpde01.smtp.sap-ag.de (Postfix) with ESMTPS id 3vn6Vy0KGMz1JFl; Mon, 20 Mar 2017 21:10:02 +0100 (CET) X-purgate-ID: 152705::1490040602-0000521C-69C3C05F/0/0 X-purgate-size: 2499 X-purgate: clean X-purgate: This mail is considered clean (visit http://www.eleven.de for further information) X-purgate-Ad: Categorized by eleven eXpurgate (R) http://www.eleven.de X-purgate-type: clean X-SAP-SPAM-Status: clean Received: from ld9781.wdf.sap.corp (ld9781.wdf.sap.corp [10.21.82.193]) by mail07.wdf.sap.corp (Postfix) with ESMTP id 3vn6Vv516VzGq8P; Mon, 20 Mar 2017 21:09:58 +0100 (CET) Received: by ld9781.wdf.sap.corp (Postfix, from userid 10159) id 9CEB41A652; Mon, 20 Mar 2017 21:09:58 +0100 (CET) In-Reply-To: <35DD73B0-433E-4F4A-AD42-37D728D78291@vigilsec.com> To: Russ Housley Date: Mon, 20 Mar 2017 21:09:58 +0100 (CET) CC: RFC Editor , IETF PKIX , rick@openfortress.nl, Stefan Santesson Reply-To: mrex@sap.com X-Mailer: ELM [version 2.4ME+ PL125 (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="US-ASCII" Message-Id: <20170320200958.9CEB41A652@ld9781.wdf.sap.corp> From: mrex@sap.com (Martin Rex) Archived-At: Subject: Re: [pkix] [Technical Errata Reported] RFC3280 (4972) X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Mar 2017 20:10:07 -0000 Russ Housley wrote: > > RFC 3280 is obsoleted by RFC 5280. This is correct in RFC 5280, > so the error has already been fixed. So the status "Held for document update" would be a perfect fit for this errata. > > On Mar 17, 2017, at 7:40 AM, RFC Errata System wrote: > > > > The following errata report has been submitted for RFC3280, > > "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile". > > > > -------------------------------------- > > You may review the report below and at: > > http://www.rfc-editor.org/errata_search.php?rfc=3280&eid=4972 > > > > -------------------------------------- > > Type: Technical > > Reported by: Rick van Rein > > > > Section: 4.2.1.5 > > > > Original Text > > ------------- > > id-ce-certificatePolicies OBJECT IDENTIFIER ::= { id-ce 32 } > > > > anyPolicy OBJECT IDENTIFIER ::= { id-ce-certificate-policies 0 } > > > > Corrected Text > > -------------- > > id-ce-certificatePolicies OBJECT IDENTIFIER ::= { id-ce 32 } > > > > anyPolicy OBJECT IDENTIFIER ::= { id-ce-certificatePolicies 0 } > > > > Notes > > ----- > > The ASN.1 did not compile due to a missing identifier. The corrected text does also occur in A.2. > > > > Instructions: > > ------------- > > This erratum is currently posted as "Reported". If necessary, please > > use "Reply All" to discuss whether it should be verified or > > rejected. When a decision is reached, the verifying party > > can log in to change the status and edit the report, if necessary. > > > > -------------------------------------- > > RFC3280 (draft-ietf-pkix-new-part1-12) > > -------------------------------------- > > Title : Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile > > Publication Date : April 2002 > > Author(s) : R. Housley, W. Polk, W. Ford, D. Solo > > Category : PROPOSED STANDARD > > Source : Public-Key Infrastructure (X.509) > > Area : Security > > Stream : IETF > > Verifying Party : IESG > > > > _______________________________________________ > > pkix mailing list > > pkix@ietf.org > > https://www.ietf.org/mailman/listinfo/pkix > > _______________________________________________ > pkix mailing list > pkix@ietf.org > https://www.ietf.org/mailman/listinfo/pkix From nobody Wed Mar 22 03:32:47 2017 Return-Path: X-Original-To: pkix@ietfa.amsl.com Delivered-To: pkix@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0CCFE1296C1 for ; Wed, 22 Mar 2017 03:32:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.62 X-Spam-Level: X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3FZ0tUTYgduU for ; Wed, 22 Mar 2017 03:32:43 -0700 (PDT) Received: from mail04.dandomain.dk (mail04.dandomain.dk [194.150.112.204]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4E5DE1316DC for ; Wed, 22 Mar 2017 03:32:38 -0700 (PDT) Received: from Morten ([156.106.228.194]) by mail04.dandomain.dk (DanDomain Mailserver) with ASMTP id 4201703221132336702; Wed, 22 Mar 2017 11:32:33 +0100 From: "Erik Andersen" To: "'Peter Bowen'" Cc: "Directory list" , "PKIX" References: <001301d28c5c$37983ed0$a6c8bc70$@x500.eu> In-Reply-To: Date: Wed, 22 Mar 2017 11:32:34 +0100 Message-ID: <001b01d2a2f7$9edf45a0$dc9dd0e0$@x500.eu> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQGY/rDTfwMD4Ic2LA5I912VdS6PWAGyGo0LAZRphAeh+bxSEA== Content-Language: en-gb Archived-At: Subject: Re: [pkix] X.500 Edition 8 modules X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: PKIX Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Mar 2017 10:32:46 -0000 Hi Peter, Sorry. I have been quite busy. The edition 8 modules should be there = now. Note that password policy has been moved out of X.509 to X.511 and = X.520, as X.509 is now restricted to PKI and PMI. Kind regards, Erik -----Oprindelig meddelelse----- Fra: Peter Bowen [mailto:pzbowen@gmail.com]=20 Sendt: 20 March 2017 18:49 Til: Erik Andersen Emne: Re: [pkix] X.500 Edition 8 modules Did these get posted? I think the changelog function on the site might = be broken. On Tue, Feb 21, 2017 at 8:04 AM, Erik Andersen wrote: > I will post them tomorrow. > > Kind regards, > > Erik > > -----Oprindelig meddelelse----- > Fra: pkix [mailto:pkix-bounces@ietf.org] P=C3=A5 vegne af Peter Bowen > Sendt: 21 February 2017 16:33 > Til: PKIX ; Directory list > Emne: [pkix] X.500 Edition 8 modules > > Does anyone know if the collected ASN.1 modules from edition 8 have=20 > been posted? http://www.x500standard.com/index.php?n=3DIg.Asn1 only = has edition 7. > > Thanks, > Peter > > _______________________________________________ > pkix mailing list > pkix@ietf.org > https://www.ietf.org/mailman/listinfo/pkix >