View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0008111 | 10000-012: Discovery | Spec | public | 2022-07-17 05:43 | 2022-07-19 15:43 |
| Reporter | Martin Regen | Assigned To | Jim Luth | ||
| Priority | normal | Severity | minor | Reproducibility | have not tried |
| Status | closed | Resolution | no change required | ||
| Summary | 0008111: CA/B Forum sunset organizationalUnitName (OU) relative distinguished name | ||||
| Description | An industry group called the CA/B Forum (Certificate Authority / Browser) oversees the Internet PKI ecosystem. The CA/B Forum has passed a new rule, ballot SC47, that sunsets the organizationalUnitName (OU) relative distinguished name. Ensure there is no reference in the spec to OU=, also that sample codes don't use it. Implication may be that commercial PKI silently strip out the OU= names when issueing certs, it can lead to functional issues when apps load the cert based on subject name, which may then be different than the original configuration, so OU should not be used. | ||||
| Tags | No tags attached. | ||||
| Commit Version | |||||
| Fix Due Date | |||||
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2022-07-17 05:43 | Martin Regen | New Issue | |
| 2022-07-19 15:43 | Jim Luth | Assigned To | => Jim Luth |
| 2022-07-19 15:43 | Jim Luth | Status | new => closed |
| 2022-07-19 15:43 | Jim Luth | Resolution | open => no change required |
| 2022-07-19 15:43 | Jim Luth | Note Added: 0017152 |
