Draft Version 0.4 publishing #573
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This commit defines a new Certificate type, infrastructure certificates, to address issue #519. This commit will update a Delegated OCSP Responder Certificates from a Subscriber Certificate to this new Infrastructure Certificate type.
Add Infrastructure Cert Type
…ence order; closes #524
…lusion of c=US and nameconstraints
… back as a change proposal after first CP release
…use relative uri for pdf download
Draft rev3
mostly editorial changes
These might be more controversial....
pretty benign
First 2 paragraphs are covered in Section 5.2.3 Remote access is clearly not required for the Root CA, and the subordinate CA CPS states that it is disabled. I don't believe this is something we want to encourage.
I consolidated and de-conflicted requirements for vulnerability scanning. Added requirements to 5.4.8 and removed them from 6.6.3
vulnerability scan requirements
Updated to address Issue #561.
The only two methods supported by the USPKI TLS is method 6 and 7. Fixes #559
Disallow underscore in dnsName entries.
Fixes #552 - Section 4.9.1.1 | Added a revocation reason for subscriber certificates due to demonstration of subscriber private key compromise. - Section 4.9.3 | Require clear instructions be provided in CPS Section 1.5.2. - Section 4.9.5 | Update for new 24 hour reporting timeline and remove activity requirements based on CRL issuance time. - Appendix A | Definition of Key compromise matches.
Integrate changes from SC06
Integrate changes from SC12
Integrate changes from SC13
modified 4.9.1.1 updated 4.9.5
Integrate changes from SC06, SC12, SC13, and SC14
to satisfy the grammar police
certificate policy updates (rev4)
* Draft rev4 website (#571) * updated config for version; updated comment page for versions * updated version and date for cover page * editorial change to remove accidental periods at the end the domain validation method section numbers * typo in section 6.5.1 * typo in 7.1.6.1 * pdf version of 0_4 cp * updated config * broken link on comment page quick fix
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Version 0.3 wasn't published to the live site. Changes in this PR inclusive of Version 0.3 and 0.4 for public and team reviews.