[pkix] Re: [Technical Errata Reported] RFC5280 (8251 )
Deb Cooley <[email protected]> Fri, 17 Jan 2025 08:40:40 -0500
| Newsgroups | gmane.ietf.x509 |
|---|---|
| Message-ID | <CAGgd1OevAgS2LFYBH+ktA65L9AtGms0pB47582f7jxsZ8LjHHg@mail.gmail.com> |
--===============6162681670039183488== Content-Type: multipart/alternative; boundary="0000000000002fe416062be70f89" --0000000000002fe416062be70f89 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I've rejected the errata. Deb Sec AD On Thu, Jan 16, 2025 at 2:19=E2=80=AFPM Roman Donchenko <[email protected]= om> wrote: > Hello, > > I'd like to revoke this errata report. I got a bit confused by the > original passage, but having re-read this, I now realize that the > existence of a node of depth i with a valid_policy of anyPolicy > necessarily implies the existence of exactly one such node of depth i-1, > and it's this other node that the second half of the sentence refers to. > > Apologies for the noise. > > -Roman. > > 15.01.2025 1:19, RFC Errata System =D0=BF=D0=B8=D1=88=D0=B5=D1=82: > > The following errata report has been submitted for RFC5280, > > "Internet X.509 Public Key Infrastructure Certificate and Certificate > Revocation List (CRL) Profile". > > > > -------------------------------------- > > You may review the report below and at: > > https://www.rfc-editor.org/errata/eid8251 > > > > -------------------------------------- > > Type: Technical > > Reported by: Roman Donchenko <[email protected]> > > > > Section: 6.1.4 > > > > Original Text > > ------------- > > If no node of depth i in the valid_policy_tree has a > > valid_policy of ID-P but there is a node of depth i with= a > > valid_policy of anyPolicy, then generate a child node of > > the node of depth i-1 that has a valid_policy of anyPoli= cy > > as follows: > > > > > > Corrected Text > > -------------- > > If no node of depth i in the valid_policy_tree has a > > valid_policy of ID-P but there is a node of depth i-1 > with a > > valid_policy of anyPolicy, then generate a child node of > > the node of depth i-1 that has a valid_policy of anyPoli= cy > > as follows: > > > > > > Notes > > ----- > > The second half of the sentence refers to the node identified in the > first half, so the depths should match. > > > > Instructions: > > ------------- > > This erratum is currently posted as "Reported". (If it is spam, it > > will be removed shortly by the RFC Production Center.) Please > > use "Reply All" to discuss whether it should be verified or > > rejected. When a decision is reached, the verifying party > > will log in to change the status and edit the report, if necessary. > > > > -------------------------------------- > > RFC5280 (draft-ietf-pkix-rfc3280bis-11) > > -------------------------------------- > > Title : Internet X.509 Public Key Infrastructure > Certificate and Certificate Revocation List (CRL) Profile > > Publication Date : May 2008 > > Author(s) : D. Cooper, S. Santesson, S. Farrell, S. Boeyen, R= . > Housley, W. Polk > > Category : PROPOSED STANDARD > > Source : Public-Key Infrastructure (X.509) > > Stream : IETF > > Verifying Party : IESG > > _______________________________________________ > pkix mailing list -- [email protected] > To unsubscribe send an email to [email protected] > --0000000000002fe416062be70f89 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div>I've rejected the errata.</div><div><br></div><di= v>Deb</div><div>Sec AD<br></div></div><br><div class=3D"gmail_quote gmail_q= uote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Thu, Jan 16, 2025 = at 2:19=E2=80=AFPM Roman Donchenko <<a href=3D"mailto:[email protected]= om">[email protected]</a>> wrote:<br></div><blockquote class=3D"gmail= _quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204= ,204);padding-left:1ex">Hello,<br> <br> I'd like to revoke this errata report. I got a bit confused by the <br> original passage, but having re-read this, I now realize that the <br> existence of a node of depth i with a valid_policy of anyPolicy <br> necessarily implies the existence of exactly one such node of depth i-1, <b= r> and it's this other node that the second half of the sentence refers to= .<br> <br> Apologies for the noise.<br> <br> -Roman.<br> <br> 15.01.2025 1:19, RFC Errata System =D0=BF=D0=B8=D1=88=D0=B5=D1=82:<br> > The following errata report has been submitted for RFC5280,<br> > "Internet X.509 Public Key Infrastructure Certificate and Certifi= cate Revocation List (CRL) Profile".<br> > <br> > --------------------------------------<br> > You may review the report below and at:<br> > <a href=3D"https://www.rfc-editor.org/errata/eid8251" rel=3D"noreferre= r" target=3D"_blank">https://www.rfc-editor.org/errata/eid8251</a><br> > <br> > --------------------------------------<br> > Type: Technical<br> > Reported by: Roman Donchenko <<a href=3D"mailto:[email protected]= m" target=3D"_blank">[email protected]</a>><br> > <br> > Section: 6.1.4<br> > <br> > Original Text<br> > -------------<br> >=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 If no node of d= epth i in the valid_policy_tree has a<br> >=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 valid_policy of= ID-P but there is a node of depth i with a<br> >=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 valid_policy of= anyPolicy, then generate a child node of<br> >=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 the node of dep= th i-1 that has a valid_policy of anyPolicy<br> >=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 as follows:<br> > <br> > <br> > Corrected Text<br> > --------------<br> >=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 If no node of d= epth i in the valid_policy_tree has a<br> >=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 valid_policy of= ID-P but there is a node of depth i-1 with a<br> >=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 valid_policy of= anyPolicy, then generate a child node of<br> >=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 the node of dep= th i-1 that has a valid_policy of anyPolicy<br> >=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 as follows:<br> > <br> > <br> > Notes<br> > -----<br> > The second half of the sentence refers to the node identified in the f= irst half, so the depths should match.<br> > <br> > Instructions:<br> > -------------<br> > This erratum is currently posted as "Reported". (If it is sp= am, it<br> > will be removed shortly by the RFC Production Center.) Please<br> > use "Reply All" to discuss whether it should be verified or<= br> > rejected. When a decision is reached, the verifying party<br> > will log in to change the status and edit the report, if necessary.<br= > > <br> > --------------------------------------<br> > RFC5280 (draft-ietf-pkix-rfc3280bis-11)<br> > --------------------------------------<br> > Title=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0: Internet= X.509 Public Key Infrastructure Certificate and Certificate Revocation Lis= t (CRL) Profile<br> > Publication Date=C2=A0 =C2=A0 : May 2008<br> > Author(s)=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0: D. Cooper, S. Sant= esson, S. Farrell, S. Boeyen, R. Housley, W. Polk<br> > Category=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : PROPOSED STANDARD<= br> > Source=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : Public-Key In= frastructure (X.509)<br> > Stream=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : IETF<br> > Verifying Party=C2=A0 =C2=A0 =C2=A0: IESG<br> <br> _______________________________________________<br> pkix mailing list -- <a href=3D"mailto:[email protected]" target=3D"_blank">pki= [email protected]</a><br> To unsubscribe send an email to <a href=3D"mailto:[email protected]" targ= et=3D"_blank">[email protected]</a><br> </blockquote></div> --0000000000002fe416062be70f89-- --===============6162681670039183488== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KcGtpeCBtYWls aW5nIGxpc3QgLS0gcGtpeEBpZXRmLm9yZwpUbyB1bnN1YnNjcmliZSBzZW5kIGFuIGVtYWlsIHRv IHBraXgtbGVhdmVAaWV0Zi5vcmcK --===============6162681670039183488==--