Clarify CA Key Pair generation #23
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Attempt to close cabforum#184
|
@wthayer @timfromdigicert in case you had thoughts |
|
Thanks. Looks good to me. |
|
Any chance to consider removing the need to have an independent audit for technically-constrained subordinate CAs? |
pfuentes69
reviewed
May 27, 2020
|
Looks reasonable to me. |
sleevi
added a commit
that referenced
this pull request
Jul 27, 2020
sleevi
added a commit
that referenced
this pull request
Jul 27, 2020
sleevi
added a commit
that referenced
this pull request
Aug 25, 2020
sleevi
added a commit
that referenced
this pull request
Nov 4, 2020
* Ballot SC28v6: Logging and Log Retention (cabforum#222) Add SC28 * SC35: Cleanups and Clarifications (cabforum#208) (cabforum#223) * Cleanup typos and issues from SC17 Closes cabforum#152 * Fix an incorrect reference from 3.2.5 to 3.2.2.5 Closes cabforum#155 * Fix typo: compliancy -> compliance Closes cabforum#159 * Cleanup old effective date for CP/CPSes Closes cabforum#161 * Update effective date for 3.2.2.4.6 Closes cabforum#163 * Move weak key lookups into 24-hour revocation Closes cabforum#164 * Align Section 6.1.1.3 with 4.9.1.1 Closes cabforum#171 * Replace RFC 6844 with RFC 8659 Closes cabforum#168 * Clarify that revocation is permitted if required by CP/CPS/BRs Closes cabforum#172 * Correct links to US gov't denial lists Closes cabforum#76 * Add a definition for CA Key Pair cabforum#127 * Clarify CA Key Pair generation (#23) Close cabforum#184 * Attempt to clarify policy OIDs (#21) Attempts to resolve cabforum#179 by introducing the term "Server Certificate" to distinguish from Subscriber Certificate (which may include Subordinate CAs), and to scope the requirements around identity information to only Server Certificates * Fixup formatting issues in the PDF * Fix issues spotted by Corey Co-authored-by: Corey Bonnell <[email protected]> * Cleanup EVG terminology * Clarify organizationIdentifier contents As requested by Mads from Buypass in https://archive.cabforum.org/pipermail/servercert-wg/2020-August/002148.html * Apply further suggestions from Corey Correct Subscriber -> Applicant in additional places Co-authored-by: Corey Bonnell <[email protected]> * Spelling, formatting, punctuation improvements (#31) * Where a word was spelling multiple ways (e.g. organization & organisation) consolidate on whichever form is the majority used * MD formatting improvements (e.g. 5 numeral headings updated to have 5 '#' instead of 4) * More consistent punctuation in section headings (e.g. '3.2.2.4.*:' vs '3.2.2.4.*') * More correct - I hope - extension values (e.g. extKeyUsage instead of extendedKeyUsage) * Improved, but identical - I hope - terminology (e.g. key purposes instead of usages where context is id-kp-*) * Various minor spelling corrections (e.g. jursidiction -> jurisdiction, Certifiation -> Certification, etc.) Co-authored-by: Corey Bonnell <[email protected]> Co-authored-by: Clint Wilson <[email protected]> Co-authored-by: sleevi <[email protected]> Co-authored-by: Corey Bonnell <[email protected]> Co-authored-by: Clint Wilson <[email protected]> * Update version numbers and cover pages. * Update effective date to 2020-10-19. * Update version for the cover page Co-authored-by: sleevi <[email protected]> Co-authored-by: Corey Bonnell <[email protected]> Co-authored-by: Clint Wilson <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Attempt to close cabforum#184