Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Section 7.1.2.8.8 is redundant #540

Open
robstradling opened this issue Aug 21, 2024 · 2 comments
Open

Section 7.1.2.8.8 is redundant #540

robstradling opened this issue Aug 21, 2024 · 2 comments

Comments

@robstradling
Copy link
Member

Section 7.1.2.8.2 (OCSP Responder Extensions) states:

certificatePolicies        MUST NOT        N        See Section 7.1.2.8.8

Section 7.1.2.8.8 (OCSP Responder Certificate Policies) begins:

If present, the Certificate Policies extension MUST contain...

The "MUST NOT" means that the "If present, then...MUST" (and indeed the entirety of 7.1.2.8.8) makes no sense.

Options for resolving this:

  • Remove 7.1.2.8.8 and the "See Section 7.1.2.8.8" note, or
  • Change "MUST NOT" to "SHOULD NOT".
Copy link

This issue was created based on:

  • TLS BR Version 2.0.6
  • EVG Version 2.0.1

@robstradling
Copy link
Member Author

Section 7.1.2.8.8 also states:

Note: See Section 7.1.2.8.2 for applicable effective dates for when this extension may be included.

However, there are no dates listed in Section 7.1.2.8.2.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant