OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

wss message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: WSS X.509 Certificate Token Profile 1.1 Issues


Some comments on the WSS X.509 Certificate Token Profile 1.1 from Forum
engineering:

The documentation of the #x509v1 token type is inconsistent and
contradictory.  The x509v1 token type should either be removed or
corrected.
Mistakes appear to have been copied from the wss 1.0 errata which
unfortunately is still posted publicly on the OASIS web site.

Line 177 (table 2) documents #x509v1 as one of four token types defined
in the profile.

Line 172 indicates that the profile only defines three token types.
Based on other inconsistencies, X509v1 seems to be the token type that
is not included.

Line 158 (URI table) omits the #x509v1 token type.

If the x509v1 token type was intended to be included, then it should be
spelled "X509v1" rather than "x509v1" for consistency with other token
type naming.  The wss 1.0 errata also used "X509v1".

Also, if x509v1 tokens are included, then there should be a new section
3.1.x in the profile to describe this token type, just as with the other
token types.

Dana S. Kaufman
VP of Product Management
Forum Systems, Inc.
Tel: (781) 788-4232
E-Mail: dkaufman@forumsys.com
Visit http://www.forumsys.com
 




[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]