Skip to content

Commit

Permalink
Adjust DN regex requirement to be URI requirement
Browse files Browse the repository at this point in the history
Fixes #273 with unclear definition and regex requirements with DN currently in draft.
  • Loading branch information
aj-stein-nist committed Aug 6, 2024
1 parent c4b24da commit c48adfd
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion draft-ietf-scitt-architecture.md
Original file line number Diff line number Diff line change
Expand Up @@ -501,7 +501,8 @@ Additionally, `x5chain` that corresponds to either `x5t` or `kid` identifying th
- When using x.509 certificates, support for `x5t` is REQUIRED to implement.
- Support for `kid` in the protected header and `x5chain` in the unprotected header is OPTIONAL to implement.

When `x5t` is present, `iss` MUST be a string with a value between 1 and 8192 characters in length that fits the regular expression of a distinguished name.
When `x5t` is present, `iss` MUST be a string that meets URI requirements defined in {{RFC8392}}.
The `iss` value's length MUST be between 1 and 8192 characters in length.

The `kid` header parameter MUST be present when `x5t` is not present.
Key discovery protocols are out-of-scope of this document.
Expand Down

0 comments on commit c48adfd

Please sign in to comment.