diff options
| author | Rob Austein <sra@hactrn.net> | 2008-04-29 19:42:55 +0000 |
|---|---|---|
| committer | Rob Austein <sra@hactrn.net> | 2008-04-29 19:42:55 +0000 |
| commit | 62182b421f39a94f7a6222d6d8ac60b1270edcbc (patch) | |
| tree | bd08eb34712451031edddbeca6126f5577755395 | |
| parent | 6485684d3771382ca0f396e6aa2edce5c9b441b7 (diff) | |
Update TODO
svn path=/rpkid/README; revision=1720
| -rw-r--r-- | rpkid/README | 21 |
1 files changed, 15 insertions, 6 deletions
diff --git a/rpkid/README b/rpkid/README index 1fdb6bd2..7fabfe9c 100644 --- a/rpkid/README +++ b/rpkid/README @@ -55,12 +55,21 @@ TO DO: - Update business trust anchor model to what was defined in Amsterdam. This was a direct result of security review by Kent and Housley. - This is probably not a lot of coding, probably a few extra certificate - fields that need to be passed in when verifying CMS or TLS. So far the - existing TA fields in various objects have become pairs of certificates - instead of a TA, but they're not yet tied into a real single TA. We - may also need a cert or two in the <self/> object so that we can tie - everything together into a single TA for the entire RPKI engine instance. + Much of this is now done. Remaining tasks: + + Add CRL to BSC + Check for CRL in received CMS + Check chain length in received CMS + Check chain length in received TLS + Check EE vs CA during validation + If CMS cert in SQL is EE: + Disallow certs in CMS + Disallow CRLs in CMS + Else: + Expect exactly one EE cert in CMS + Expect exactly one CRL in CMS + If TLS cert in SQL is EE: + EE cert in SQL must be same as EE cert received from TLS PRIORITY: Required for pilot (security issue) |