Confirmed users
299
edits
SecurityEngineering/mozpkix-testing: Difference between revisions
SecurityEngineering/mozpkix-testing (view source)
Revision as of 20:05, 31 March 2014
, 31 March 2014→Things for CAs to Fix
| Line 62: | Line 62: | ||
#* 11.5 of X.690 - "The encoding of a set value or sequence value shall not include an encoding for any component value which is equal to its default value." | #* 11.5 of X.690 - "The encoding of a set value or sequence value shall not include an encoding for any component value which is equal to its default value." | ||
#* Related Bugs: {{Bug|988633}}, {{Bug|989516}}, {{Bug|989518}} | #* Related Bugs: {{Bug|988633}}, {{Bug|989516}}, {{Bug|989518}} | ||
# Basic constraints: pathLenConstraint must not be included if cA is false | |||
#* RFC 5280 section 4.2.1.9: "CAs MUST NOT include the pathLenConstraint field unless the cA boolean is asserted and the key usage extension asserts the keyCertSign bit." | |||
#* Related Bugs: {{Bug|982878}}, {{Bug|985021}}, {{Bug|985025}} | |||
== Future Considerations == | == Future Considerations == | ||