0003021: Security Profiles should state that X509 hashes weaker than the profile requires SHALL be rejected.

ID	Project	Category	View Status	Date Submitted	Last Update

0003021	10000-006: Mappings	Spec	public	2015-04-02 15:43	2015-06-30 17:01

Reporter	Randy Armstrong	Assigned To	Randy Armstrong
Priority	normal	Severity	minor	Reproducibility	always
Status	closed	Resolution	fixed
Product Version	1.03
Target Version	1.03	Fixed in Version	1.03

Summary	0003021: Security Profiles should state that X509 hashes weaker than the profile requires SHALL be rejected.
Description	i.e. Basic256Sha256 mandates Sha256. Sha1 hashes are not acceptable.
Tags	No tags attached.

Commit Version
Fix Due Date

Karl Deiretsbacher 2015-05-19 15:56 developer ~0006070 Last edited: 2015-05-19 16:06	We need to add a SecuritySignatureAlgorithm to Table Security Policy and describe in this row that the algorithm to sign a certificate shall always be the same or stronger (.... find a weaker wording) than the SecuritySignatureAlgorithm defined for the policy.

Randy Armstrong 2015-06-25 19:50 administrator ~0006181	Fixed in RC 1.03.13

Jim Luth 2015-06-30 17:01 administrator ~0006186	Agreed to changes in telecon.

Date Modified	Username	Field	Change
2015-04-02 15:43	Randy Armstrong	New Issue
2015-04-21 16:02	Karl Deiretsbacher	Assigned To	=> Randy Armstrong
2015-04-21 16:02	Karl Deiretsbacher	Status	new => assigned
2015-05-19 15:56	Karl Deiretsbacher	Note Added: 0006070
2015-05-19 15:56	Karl Deiretsbacher	Project	10000-007: Profiles => 10000-006: Mappings
2015-05-19 16:06	Karl Deiretsbacher	Note Edited: 0006070
2015-05-19 16:08	Jim Luth	Relationship added	related to 0003020
2015-06-25 19:50	Randy Armstrong	Note Added: 0006181
2015-06-25 19:50	Randy Armstrong	Status	assigned => resolved
2015-06-25 19:50	Randy Armstrong	Resolution	open => fixed
2015-06-30 17:01	Jim Luth	Note Added: 0006186
2015-06-30 17:01	Jim Luth	Status	resolved => closed
2015-06-30 17:01	Jim Luth	Fixed in Version	=> 1.03