This is a static archive of the previous Open Grid Forum GridForge content management system saved from host forge.ogf.org file /sf/go/projects.ggf-editor/discussion.cp_grid_certificate_profile.topc4116 at Sun, 06 Nov 2022 09:02:43 GMT SourceForge : Post

Project Home

Tracker

Documents

Tasks

Source Code

Discussions

File Releases

Wiki

Project Admin
Project: Editor     Discussion > CP:Grid Certificate Profile > "Basic Constraints" Extension in CA Certificate > List of Posts
Forum Topic - "Basic Constraints" Extension in CA Certificate: (1 Item)
View:  as 
 
 
"Basic Constraints" Extension in CA Certificate
Hi,

We are Netrust, a commercial and licensed CA operating from Singapore. 

We would like to comment on one of the recommendations in the Grid 

Certificate Profile, namely Section 2.4.1 which currently mandates the 

"Basic Constraints" field as "critical".

We have written a white paper explaining the rational for NOT marking 

this field as critical. While the criticality is intended for a CA to 

make the use of its certificates more robust, the verification systems 

currently in use do not factor the criticality of many of these 

extensions, even according to the RFC 3280. Only the actual value of the 

"Basic Constraints" field influences the verification decision.

We would like the comments of the community on the same.

Regards,
Vivek Kaushik.
Principal Consultant
Netrust Pte Ltd
Singapore.
Attachment: BasicConstraints_whitepaper_v1.0.pdf 33.49 KB

 
 


The Open Grid Forum Contact Webmaster | Report a problem | GridForge Help
This is a static archive of the previous Open Grid Forum GridForge content management system saved from host forge.ogf.org file /sf/go/projects.ggf-editor/discussion.cp_grid_certificate_profile.topc4116 at Sun, 06 Nov 2022 09:02:43 GMT