Re: [Acme] [Technical Errata Reported] RFC8555 (5983)

James Kasten <jdkasten@umich.edu> Tue, 25 February 2020 14:21 UTC

Return-Path: <jdkasten@umich.edu>
X-Original-To: acme@ietfa.amsl.com
Delivered-To: acme@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 07D1B3A0DCB for <acme@ietfa.amsl.com>; Tue, 25 Feb 2020 06:21:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=umich.edu
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yE2wIjQvQAAy for <acme@ietfa.amsl.com>; Tue, 25 Feb 2020 06:21:47 -0800 (PST)
Received: from mail-il1-x136.google.com (mail-il1-x136.google.com [IPv6:2607:f8b0:4864:20::136]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EAE453A0DC7 for <acme@ietf.org>; Tue, 25 Feb 2020 06:21:46 -0800 (PST)
Received: by mail-il1-x136.google.com with SMTP id v13so10937185iln.4 for <acme@ietf.org>; Tue, 25 Feb 2020 06:21:46 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=umich.edu; s=google-2016-06-03; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=mrDZjRiiLYCPx8Vf+nRcTSddj0E9NKn1uPK9GEI+UUw=; b=D22x91SjncVrQ8JkNqk2lQWCagewg4AFItDrP39vysjPo+cyEWjjJrZVFEdsW83rAq p2/lzB7611gt8Jh3VViqpx/iBl5aPS4g932wuHvPRXYZcF3pachHoP68yxXqaheG+Hyr HaaQTQe5O69ZWPdiIVQeKqbzdjUoTMDfmfTqVuDyFtcJMGuPFNOpy1/hUhc/3gn1Vv5Y 2YeHe+FMQO7Q1ch26Q5GJ/cZxXtcOkcEEvJqa/L+OFOe9EfqCVY0Gqmhrzj64hAoGQ4Y G7SM6SGlhO/wK353ImAxj2wjZFvur8mWk1gnqCH5H2JlDDJfTqQO1RjlXPilVloqkd/D DPRw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=mrDZjRiiLYCPx8Vf+nRcTSddj0E9NKn1uPK9GEI+UUw=; b=FNv+xNDMXlN5WuZ7iStDPLwcBXdeNCiDbgmr+zIHLoxYwSfiv/P8oT67nNkwSR2upR oRCDt1hDiHrpMpJp8lIiw9yUQfApCwf4Vmb42FBp792dJvowfBfsCDFq0oOzS64jNUS0 UeLlf888nyFiuMcdR0qgEIR/jiWcQb0EGvTE/8uzJplGSZ/A1TmSVWh2lUoOh0a/eBwR o1xTrJoxumIizIPyDjHIAU+4f/KaPND4aQsM46C5broENlrJLdVcWwiLzMnJv4yW/MFJ dsGNjsKNlCkt3bKs8vl67Vundvv9GbYLWU0+QJLYlkCQeV/vrhWCFGnIGS1NM0f33iTR q3sw==
X-Gm-Message-State: APjAAAUcerJ9rAhPJbVRFIBFFcSv1tWLKkwMKpdgLKz8iSma5DABOLjr bvVILeKTiSd33TEg0zkN6+5sotlLyX7n2LOZoKchnw==
X-Google-Smtp-Source: APXvYqyXsJV66cffcVglIl26Bpf+iI4nkrmIacFP7CGEdXYdTmqQCjSbULBL0+UtId6XyNwiH5SiSkdt93PsBo5PBR8=
X-Received: by 2002:a92:58cc:: with SMTP id z73mr58240596ilf.222.1582640506108; Tue, 25 Feb 2020 06:21:46 -0800 (PST)
MIME-Version: 1.0
References: <20200214181853.537B6F40709@rfc-editor.org> <20200225014621.GD5814@kduck.mit.edu> <CAL02cgQHhHn-7wju28a8Lt=yihYy4-Hz8UZPgg0oyy0vgYgYnQ@mail.gmail.com>
In-Reply-To: <CAL02cgQHhHn-7wju28a8Lt=yihYy4-Hz8UZPgg0oyy0vgYgYnQ@mail.gmail.com>
From: James Kasten <jdkasten@umich.edu>
Date: Tue, 25 Feb 2020 06:21:32 -0800
Message-ID: <CAAEpsx-w0CkZuwy_J7YrMwcnfdvQieJd6VcKJY92RX0qVwUJTA@mail.gmail.com>
To: Richard Barnes <rlb@ipv.sx>
Cc: Benjamin Kaduk <kaduk@mit.edu>, RFC Errata System <rfc-editor@rfc-editor.org>, Jacob Hoffman-Andrews <jsha@eff.org>, Daniel McCarney <cpu@letsencrypt.org>, Roman Danyliw <rdd@cert.org>, "Salz, Rich" <rsalz@akamai.com>, Yoav Nir <ynir.ietf@gmail.com>, thebaker@google.com, IETF ACME <acme@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000002c9ff5059f6735cc"
Archived-At: <https://mailarchive.ietf.org/arch/msg/acme/N5n4WL2-LFE7y1hiHepnNLgboDs>
X-Mailman-Approved-At: Tue, 25 Feb 2020 08:06:47 -0800
Subject: Re: [Acme] [Technical Errata Reported] RFC8555 (5983)
X-BeenThere: acme@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Automated Certificate Management Environment <acme.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/acme>, <mailto:acme-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/acme/>
List-Post: <mailto:acme@ietf.org>
List-Help: <mailto:acme-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/acme>, <mailto:acme-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Feb 2020 14:21:52 -0000

I agree.

On Tue, Feb 25, 2020, 5:05 AM Richard Barnes <rlb@ipv.sx> wrote:

> This seems Verified to me.
>
> On Mon, Feb 24, 2020 at 8:46 PM Benjamin Kaduk <kaduk@mit.edu> wrote:
>
>> Authors, should this be marked Verified?
>>
>> Thanks,
>>
>> Ben
>>
>> On Fri, Feb 14, 2020 at 10:18:53AM -0800, RFC Errata System wrote:
>> > The following errata report has been submitted for RFC8555,
>> > "Automatic Certificate Management Environment (ACME)".
>> >
>> > --------------------------------------
>> > You may review the report below and at:
>> > https://www.rfc-editor.org/errata/eid5983
>> >
>> > --------------------------------------
>> > Type: Technical
>> > Reported by: Jason Baker <thebaker@google.com>
>> >
>> > Section: 9.1
>> >
>> > Original Text
>> > -------------
>> >    A file of this type contains one or more certificates encoded with
>> >    the PEM textual encoding, according to [RFC7468].  The textual
>> >    encoding of certificates in this file MUST use the strict encoding
>> >    and MUST NOT include explanatory text.  The ABNF for this format is
>> >    as follows, where "stricttextualmsg" and "eol" are as defined in
>> >    Section 3 of RFC 7468:
>> >
>> >    certchain = stricttextualmsg *(eol stricttextualmsg)
>> >
>> > Corrected Text
>> > --------------
>> >    A file of this type contains one or more certificates encoded with
>> >    the PEM textual encoding, according to [RFC7468].  The textual
>> >    encoding of certificates in this file MUST use the strict encoding
>> >    and MUST NOT include explanatory text.  The ABNF for this format is
>> >    as follows, where "stricttextualmsg" is as defined in
>> >    Section 3 of RFC 7468:
>> >
>> >    certchain = stricttextualmsg *(stricttextualmsg)
>> >
>> > Notes
>> > -----
>> > Examples within RFC 8555 indicate that only one EOL should be present
>> between entries in the PEM chain.
>> >
>> > RFC 7468 already defines a stricttextualmsg as ending with EOL
>> > stricttextualmsg = preeb eol
>> >                            strictbase64text
>> >                            posteb eol
>> >
>> > If a second EOL is to be added before each strict textual message this
>> would result in a blank line between entries.  The prior example in
>> https://tools.ietf.org/html/rfc8555#section-7.4.2 indicates an intention
>> for only one EOL marker to be used:
>> >    -----BEGIN CERTIFICATE-----
>> >    [End-entity certificate contents]
>> >    -----END CERTIFICATE-----
>> >    -----BEGIN CERTIFICATE-----
>> >    [Issuer certificate contents]
>> >    -----END CERTIFICATE-----
>> >    -----BEGIN CERTIFICATE-----
>> >    [Other certificate contents]
>> >    -----END CERTIFICATE-----
>> >
>> > Instructions:
>> > -------------
>> > This erratum is currently posted as "Reported". If necessary, please
>> > use "Reply All" to discuss whether it should be verified or
>> > rejected. When a decision is reached, the verifying party
>> > can log in to change the status and edit the report, if necessary.
>> >
>> > --------------------------------------
>> > RFC8555 (draft-ietf-acme-acme-18)
>> > --------------------------------------
>> > Title               : Automatic Certificate Management Environment
>> (ACME)
>> > Publication Date    : March 2019
>> > Author(s)           : R. Barnes, J. Hoffman-Andrews, D. McCarney, J.
>> Kasten
>> > Category            : PROPOSED STANDARD
>> > Source              : Automated Certificate Management Environment
>> > Area                : Security
>> > Stream              : IETF
>> > Verifying Party     : IESG
>>
>