Public Review comments for KMIP Specification v2.1 Candidate OASIS Standard

[Paul Knight <paul.knight@oasis-open.org>]

Hi KMIP TC members,

There are some issues with the ÂKMIP Specification v2.1 document which will need to be addressed before it is ready to be published as an OASIS Standard. These issues are not "Material Changes" [1], and (unless other comments require such changes), they may be addressed by publishing a corrected version as Committee Specification 02, as described in the TC Process [2]. This will not require any additional public review before beginning the OASIS Standard "Call for Consent" approval process.

There are a large number of broken links to Normative References. Apparently, the targets have become inaccessible since some earlier versions of the specification.

I found correct targets for most of these with fairly quick searches.

Below is a list of bad links in Normative References in kmip-spec-v2.1-cs01, along with functional links for many of them.

[ECC-Brainpool] http://www.ecc-brainpool.org/download/Domain-parameters.pdf - appears to be permanently broken. I did not find a source.

[PKCS#1] Âhttp://www.preserveitall.org/emc-plus/rsa-labs/standards-initiatives/pkcs-rsa-cryptography-standard.htm
this should point to https://tools.ietf.org/html/rfc3447, or a later version like https://tools.ietf.org/html/rfc8017

[PKCS#5] Âhttp://www.preserveitall.org/emc-plus/rsa-labs/standards-initiatives/pkcs-5-password-based-cryptography-standard.htm
this should point to the RFC: https://tools.ietf.org/html/rfc8018

[PKCS#8] Âhttp://www.preserveitall.org/emc-plus/rsa-labs/standards-initiatives/pkcs10-certification-request-syntax-standard.htm
this should point to the RFC: https://tools.ietf.org/html/rfc5208

[PKCS#10] Âhttp://www.preserveitall.org/emc-plus/rsa-labs/standards-initiatives/pkcs-8-private-key-information-syntax-stand.htm
this should point to the RFC: https://tools.ietf.org/html/rfc2986

[PKCS#11] ÂOASIS PKCS#11 Cryptographic Token Interface Base Specification Version 3.0 (nothing else)
this needs to provide the proper citation:
PKCS #11 Cryptographic Token Interface Base Specification Version 3.0. Edited by Chris Zimman and Dieter Bong. 15 June 2020. OASIS Standard. https://docs.oasis-open.org/pkcs11/pkcs11-base/v3.0/os/pkcs11-base-v3.0-os.html. Latest stage: https://docs.oasis-open.org/pkcs11/pkcs11-base/v3.0/pkcs11-base-v3.0.html.

[X.509] http://www.itu.int/rec/recommendation.asp?lang=en&parent=T-REC-X.509-200811-1
I found the correct link fairly easily in two forms:
download page: https://www.itu.int/rec/T-REC-X.509-200811-S
PDF link: https://www.itu.int/rec/dologin_pub.asp?lang=e&id=T-REC-X.509-200811-S!!PDF-E&type=items

[1]Âhttps://www.oasis-open.org/policies-guidelines/oasis-defined-terms-2018-05-22#dMaterialChange

[2]Âhttps://www.oasis-open.org/policies-guidelines/tc-process-2017-05-26#OSpublicRev

Best regards,

Paul

--Â

Paul Knight....Document Process Analyst

OASIS - Advancing open standards for the information society