Defect reports against X.509

Hello

I have posted some defect reports on the server. Three of these (DRs 272, 273, and 274) are revisions of proposed defect resolutions that I posted in late November of last year. There was a substantial amount of comment. These revised texts should address those comments.

In addition I have posted DRs 275 - 277. The subject of the DRs are

DR 272 - Certification path length
DR 273 - Name constraints
DR 274 - Attribute certificate version
DR 275 - Extended key usage
DR 276 - Any policy in self-issued certificates
DR 277 - Requires explicit policy skip certs value

The DRs can be found at

ftp://ftp.bull.com/pub/OSIdirectory/DefectResolution/DefectReports/X.509andRelated/DR_272Rev1.pdf

ftp://ftp.bull.com/pub/OSIdirectory/DefectResolution/DefectReports/X.509andRelated/DR_273Rev1.pdf

ftp://ftp.bull.com/pub/OSIdirectory/DefectResolution/DefectReports/X.509andRelated/DR_274Rev2.pdf

ftp://ftp.bull.com/pub/OSIdirectory/DefectResolution/DefectReports/X.509andRelated/DR_275.pdf

ftp://ftp.bull.com/pub/OSIdirectory/DefectResolution/DefectReports/X.509andRelated/DR_276.pdf

ftp://ftp.bull.com/pub/OSIdirectory/DefectResolution/DefectReports/X.509andRelated/DR_277.pdf

We plan to submit these solutions, within the next two weeks, for formal voting in ISO. Therefore if there are any concerns about the proposed solutions, please let us know as soon as possible so any necessary modifications can be made before submitting to ballot.

On the issue of name constraints, we would like to thank the PKIX profile editors and contributors for all the effort they gave between the last PKIX meeting and the X.509 meeting in Geneva in late January. That effort ensured that we arrived at a single solution that satisfies the combined requirements that have arisen in both groups. This solution was reviewed during the meeting meeting in Geneva and has the support of those present at that meeting.

We have also approved Technical Corrigenda to both the 3rd and 4th editions. They can be found at

ftp://ftp.bull.com/pub/OSIdirectory/DefectResolution/TechnicalCorrigenda/ApprovedTechnicalCorrigendaToX.509/TC1toX.509%7C8-4thEdition.pdf

ftp://ftp.bull.com/pub/OSIdirectory/DefectResolution/TechnicalCorrigenda/ApprovedTechnicalCorrigendaToX.509/TC9toX.509%7C8-3rdEdition.pdf

The TC to the 4th edition will be incorporated into the 4th edition. ITU has not been able to published the document as originally scheduled but I expect they will have it out in the next few months. In the interim we will publish yet another "final" version of X.509 on the server within the next few weeks. It will be announced to these lists when it is available.