[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: order of name attributes in certificates, suggestion for 3280 bis
Michael Ströder wrote:
Especially RFC3280bis should have a normative reference to the DN string
representation used for the example DNs in appendix C which defines:
- order
- character set
- defined RDN separator
- multi-valued RDNs
I do not believe that 3280bis should include a normative reference to
RFC 2253, although I don't see any problem including an informative
reference. The IETF describes normative references as follows:
Normative references specify documents that must be read to
understand or
implement the technology in the new RFC, or whose technology must be
present
for the technology in the new RFC to work.
The only places that I can find string representations of DNs in 3280bis
are in the examples of LDAP URIs and in Appendix C. The rules for LDAP
URIs, including the rules for distinguishedName portion of the URI, are
specified in RFC 2255, which is already listed as a normative
reference. The string representation of DNs in Appendix C are simply
used to describe sample certificates, and I see no reason that the
inclusion of these examples would result in the need to list RFC 2253 as
a normative reference.
Semicolons as RDN separators like used in appendix C are today not
widely known to implementors and disallowed in LDAPv3 (see RFC 2253).
I can't find any place in 3280bis were semicolons are used as RDN
separators. If there are any string representations of DNs in 3280bis
that do not conform to RFC 2253, please specify where they are and I
will correct them.
I'd think this needs clarification. Also character set of string
representation should be clearly specified (UTF-8 in RFC 2253).
I will add a note in Appendix C indicating that all string
representations of DNs are encoded in accordance with RFC 2253.
=> use a normative reference to RFC 2253 (or its upcoming successor
draft-ietf-ldapbis-dn) and correct examples in appendix C accordingly.
I will add an informative reference. If any of the examples are
incorrect, please specify where they are since do not see any.
Dave