View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
000252710000-012: DiscoverySpecpublic2013-07-09 17:252014-10-29 20:36
ReporterKarl Deiretsbacher Assigned ToRandy Armstrong  
PrioritynormalSeveritymajorReproducibilityalways
Status closedResolutionfixed 
Target Version1.03Fixed in Version1.03 
Summary0002527: Registration through HTTPS does not work
Description

With HTTPS endpoints we do not have application authentication since a HTTPS client does normally not provide a client certificate for application authentication. But we have also no Session creation in the LDS to check the client application instance certificate. Therefore we can not do any validation of the client if RegisterServer is called through the HTTPS endpoint.

What should we do?
How can we address this issue?

We can simply reject RegisterServer if it is called through the HTTPS endpoint but we need to document that somewhere.

TagsNo tags attached.
Commit Version
Fix Due Date

Activities

Karl Deiretsbacher

2013-07-09 17:26

developer   ~0004770

Last edited: 2013-07-09 17:31

2013-07-09: UA meeting
We suggest to disallow registration through HTTPS.
Servers register to their local LDS and can always do this with UA TCP.

Randy Armstrong

2014-10-09 03:40

administrator   ~0005522

Added clarification toe RegisterServer2 definition in 1.02.40

The same text needs to be added to Part 4.

Jim Luth

2014-10-28 16:32

administrator   ~0005585

Reviewed and agreed to changes in telecon.

Issue History

Date Modified Username Field Change
2013-07-09 17:25 Karl Deiretsbacher New Issue
2013-07-09 17:26 Karl Deiretsbacher Note Added: 0004770
2013-07-09 17:26 Karl Deiretsbacher Status new => assigned
2013-07-09 17:26 Karl Deiretsbacher Assigned To => Randy Armstrong
2013-07-09 17:31 Karl Deiretsbacher Note Edited: 0004770
2014-08-19 17:37 Jim Luth Category (No Category) => Spec
2014-08-19 17:38 Jim Luth Target Version => 1.02
2014-10-09 03:40 Randy Armstrong Note Added: 0005522
2014-10-09 03:40 Randy Armstrong Status assigned => resolved
2014-10-09 03:40 Randy Armstrong Resolution open => fixed
2014-10-28 16:32 Jim Luth Note Added: 0005585
2014-10-28 16:32 Jim Luth Status resolved => closed
2014-10-28 16:32 Jim Luth Fixed in Version => 1.03
2014-10-29 20:36 Jim Luth Target Version 1.02 => 1.03
2014-10-29 20:36 Jim Luth Description Updated