Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improvements and Fixes for Edge Cases in X.509 Certificates (Continuation) #549

Open
akarabashov opened this issue Mar 7, 2024 · 0 comments
Projects

Comments

@akarabashov
Copy link
Collaborator

This is a continuation of Issue #535 , here are
improvements and fixes that were either not included in the previous issue's scope or were transferred from the scope of that issue.

Current Behavior and Proposed Fixes

Current behavior Proposed Changes Comment
1. It is possible to add the root certificates with the same subject and SKID but with a different VID field After adding the first root certificate with a specific VID, all subsequent certificates that are added with the same subject and SKID fields must have the same VID field
2 Only original proposer account of a Root cert with the given Subject+SKID can propose another root cert with the same Subject+SKID Any Trustee can propose any root certificates
3. If a Root or Leaf certificate is revoked, there is no way of un-revoking it or proposing it back. For Root and Non-root: Need to be able to re-add after revocation (soft-delete) or remove
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
DCL 1.4
To do
Development

No branches or pull requests

1 participant