View Issue Details

IDProjectCategoryView StatusLast Update
000743110000-007: ProfilesSpecpublic2021-12-06 15:37
ReporterDavid_Andover Smith Assigned ToKarl Deiretsbacher  
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Product Version1.05.00 RC1 
Fixed in Version1.05.00 
Summary0007431: TransportSecurity – TLS 1.1 description for deprecation is inaccurate
Description

The current description for Conformance unit TransportSecurity – TLS 1.1 (http://opcfoundation.org/UA-Profile/TransportSecurity/TLS-1-1) is no longer accurate. It says "Note: Since the RC4 algorithm is not considered secure anymore, this Transport Security has been deprecated with the OPC UA Specification Version 1.03"

Since 1.03 has been released, TLS 1.1 has been deprecated by the Best Current Practices RFC8996 (https://www.rfc-editor.org/rfc/rfc8996.txt) for more reasons than just the usage of the RC4 algorithm.

A suggested update: "Note: Since TLS 1.1 does not support any AEAD ciphers it is not considered secure any more. this Transport Security has been depreciated with the OPC UA Specification Version 1.03"

TagsNo tags attached.
Commit Version
Fix Due Date

Activities

Jim Luth

2021-12-06 15:37

administrator   ~0015461

Agreed to close in Virtual F2F.

Issue History

Date Modified Username Field Change
2021-11-24 15:13 David_Andover Smith New Issue
2021-11-26 11:08 Karl Deiretsbacher Assigned To => Karl Deiretsbacher
2021-11-26 11:08 Karl Deiretsbacher Status new => assigned
2021-12-06 15:37 Jim Luth Status assigned => closed
2021-12-06 15:37 Jim Luth Resolution open => fixed
2021-12-06 15:37 Jim Luth Fixed in Version => 1.05.00
2021-12-06 15:37 Jim Luth Note Added: 0015461