View Issue Details

IDProjectCategoryView StatusLast Update
000961510000-006: MappingsSpecpublic2024-07-03 16:40
ReporterHock, Christian Assigned ToRandy Armstrong  
PriorityurgentSeveritymajorReproducibilityalways
Status assignedResolutionopen 
Product Version1.05.03 
Target Version1.05.03 
Summary0009615: Clarification for 'SubjectName' and 'subject in Part 6, 'subject' in Part 12 and 'subject name' in Part 18
Description

In Part 6 (1.05.03) 'https://reference.opcfoundation.org/Core/Part6/v105/docs/E.3' the 'SubjectName' in a 'CertificateIdentifier' is defined and described.

In Part 6 (1.05.03) 'https://reference.opcfoundation.org/Core/Part6/v105/docs/6.2.2' the 'subject', 'issuer' and 'subjectAltName' ist defined and described, but references RFC 5280 'https://datatracker.ietf.org/doc/html/rfc5280' and the 'Subject' description can be found in 'https://datatracker.ietf.org/doc/html/rfc5280#section-4.1.2.6' which refers to 'Issuer' -'https://datatracker.ietf.org/doc/html/rfc5280#section-4.1.2.4' and finally to RFC 4519 'https://datatracker.ietf.org/doc/html/rfc4519'.

In Part 12 (1.05.02) 'https://reference.opcfoundation.org/GDS/v105/docs/7.9.4' (StartNewKeyPairRequest) and 'https://reference.opcfoundation.org/GDS/v105/docs/7.10.7' (CreateSigningRequest​) the 'subjectName' is decribed different from Part 6 and Part 18.

  • If the value contains a ‘/’ or a ‘=’ then it shall be enclosed in double quotes (‘”’).

In Part 18 (1.05.03) 'https://reference.opcfoundation.org/Core/Part18/v105/docs/4.4.3' it is described different than in Part 12 and Part 6.

  • The name shall be one of entries in Table 8 and shall be followed by a '=' and then followed by the value, which is always enclosed in double quotes ('"').

Questions:

  • Why it is defined in Part 12, Part 18 and twice in Part 6?
  • Why during the virtual F2F-Meeting (06/12/24 - Afternoon meeting from minutes ~00:04:10 to ~00:13:45) the desicion was made, that if the 'subjectName' does not contain any '=' that it is not anymore allowed to be the CommonName?
    • But, this is clearly stated in Part 6 Values that do not contain '=' characters are presumed to be the Common Name component.
  • Why in Part 12 the restriction is made to ‘CN’, ‘O’, ‘OU’, ‘DC’, ‘L’, ‘S’ or ‘C’ only - that severely restricts the definition in Part 6 (RFC4514/RFC4519)?
  • The mentioned RFC4514 in Part 6 assumes, that the String 'X.500 AttributeType' should be written in capital letters (‘CN’, ‘O’, ‘OU’, ‘DC’, ...), but in RFC4519 where these attribute types are descriped they are written in lower case letters (‘cn’, ‘o’, ‘ou’, ‘dc’, ...).
    • Are both writings (UPPER and lower case) allowed considering both RFC4514 and RFC4519?

Recommentation:

  • The SubjectName should be described ONLY ONCE in Part 6.
  • The writing should identical 'SubjectName' and not 'subject' as in Part 12 or ' subject name' or 'name' as in Part 18 if it means the same.
  • Revert the desicion made for the Common Name during the virtual F2F-Meeting.
TagsNo tags attached.
Commit Version
Fix Due Date

Activities

Jim Luth

2024-06-25 15:50

administrator   ~0021392

Agreed that the normative requirements will only be described in Part 6 and all other Parts will reference the common requirements in Part 6.

Randy Armstrong

2024-06-26 16:55

administrator   ~0021393

Last edited: 2024-07-03 16:40

Part 6 - non-normative in E.3, text clarified.

Part 12 - reference RFC 4514 and deprecate existing syntax.

Part 18 - reference RFC 4514 in 5.1.4

Issue History

Date Modified Username Field Change
2024-06-20 07:54 Hock, Christian New Issue
2024-06-21 05:45 Hock, Christian Description Updated
2024-06-21 05:48 Hock, Christian Summary Clarification for 'SubjectName' in Part 6 and 'subjectName' in Part 12 => Clarification for 'SubjectName' in Part 6, 'subject' in Part 12 and 'subject name' in Part 18
2024-06-21 05:56 Hock, Christian Description Updated
2024-06-21 06:04 Hock, Christian Description Updated
2024-06-25 11:33 Hock, Christian Summary Clarification for 'SubjectName' in Part 6, 'subject' in Part 12 and 'subject name' in Part 18 => Clarification for 'SubjectName' and 'subject in Part 6, 'subject' in Part 12 and 'subject name' in Part 18
2024-06-25 11:33 Hock, Christian Description Updated
2024-06-25 15:50 Jim Luth Note Added: 0021392
2024-06-25 15:51 Jim Luth Assigned To => Randy Armstrong
2024-06-25 15:51 Jim Luth Status new => assigned
2024-06-25 16:01 Jim Luth Project 10000-005: Information Model => 10000-006: Mappings
2024-06-26 05:52 Hock, Christian Description Updated
2024-06-26 16:55 Randy Armstrong Note Added: 0021393
2024-06-26 16:56 Randy Armstrong Note Edited: 0021393
2024-06-26 16:56 Randy Armstrong Note Edited: 0021393
2024-06-26 22:56 Randy Armstrong Issue cloned: 0009624
2024-07-03 16:40 Randy Armstrong Note Edited: 0021393