IETF Logo Mail Archive

Re: [pkix] [Errata Held for Document Update] RFC7030 (5107)

Eliot Lear <lear@cisco.com> Thu, 20 August 2020 08:01 UTC

Return-Path: <lear@cisco.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BCD2A3A09B1; Thu, 20 Aug 2020 01:01:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.601
X-Spam-Level:
X-Spam-Status: No, score=-9.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vIj2HVV1KDm3; Thu, 20 Aug 2020 01:01:56 -0700 (PDT)
Received: from aer-iport-3.cisco.com (aer-iport-3.cisco.com [173.38.203.53]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B0523A097B; Thu, 20 Aug 2020 01:01:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2565; q=dns/txt; s=iport; t=1597910515; x=1599120115; h=mime-version:subject:from:in-reply-to:date:cc: content-transfer-encoding:message-id:references:to; bh=IdpIX8Y0ZXxPwvLVF+0o+FoyTaDWlZysfnY1DRmKYBQ=; b=CPypDEwg81uHXHlfIQqhVVK1xRgA+XUKkuNrRWokWcDIXqtOZcsDZ+5b 4Yf+95ZBa2NDNtjgPEVxndTcn0UXsMnstENYhEOV+S2F3mVBeR9tO40mm DK3rP3673xjkmKpF6z0A9Reakln0gdUgbNOSkMJhtn7cCWdAuyIHj2cf/ E=;
X-IronPort-AV: E=Sophos;i="5.76,332,1592870400"; d="scan'208";a="26466507"
Received: from aer-iport-nat.cisco.com (HELO aer-core-3.cisco.com) ([173.38.203.22]) by aer-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 20 Aug 2020 08:01:53 +0000
Received: from [10.61.195.70] ([10.61.195.70]) by aer-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id 07K81qiI024693 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 20 Aug 2020 08:01:53 GMT
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.1\))
From: Eliot Lear <lear@cisco.com>
In-Reply-To: <20200819195942.31E7AF4078B@rfc-editor.org>
Date: Thu, 20 Aug 2020 10:01:52 +0200
Cc: sean@sn3rd.com, "Max Pritikin (pritikin)" <pritikin@cisco.com>, peter@akayla.com, dharkins@arubanetworks.com, rdd@cert.org, pkix@ietf.org, iesg@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <34A56278-4146-42F8-8F3E-E5B524212C6A@cisco.com>
References: <20200819195942.31E7AF4078B@rfc-editor.org>
To: RFC Errata System <rfc-editor@rfc-editor.org>
X-Mailer: Apple Mail (2.3608.120.23.2.1)
X-Outbound-SMTP-Client: 10.61.195.70, [10.61.195.70]
X-Outbound-Node: aer-core-3.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/pkix/F9KlrR1yHZvCX4lylY9OvoDai08>
Subject: Re: [pkix] [Errata Held for Document Update] RFC7030 (5107)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/pkix/>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Aug 2020 08:01:58 -0000

Hi,

I think this one is fixed in the 7030 fixup doc that is currently wending its way through the approval process.

Eliot


> On 19 Aug 2020, at 21:59, RFC Errata System <rfc-editor@rfc-editor.org> wrote:
> 
> The following errata report has been held for document update 
> for RFC7030, "Enrollment over Secure Transport". 
> 
> --------------------------------------
> You may review the report below and at:
> https://www.rfc-editor.org/errata/eid5107
> 
> --------------------------------------
> Status: Held for Document Update
> Type: Technical
> 
> Reported by: Sean Turner <sean@sn3rd.com>
> Date Reported: 2017-09-07
> Held by: Roman Danyliw (IESG)
> 
> Section: 3.2.1
> 
> Original Text
> -------------
> 
> 
> Corrected Text
> --------------
> Add the following is as the last paragraph of Section 3.2.1:
> 
> [RFC2616] indicates "HTTP does not use the
> Content-Transfer-Encoding (CTE) field of RFC 2045”; nevertheless, this
> document was published specifying the use of the
> Content-Transfer-Encoding header with a value of ‘base64' in Sections
> 4.1.3, 4.3.1, 4.3.2, 4.4.2, 4.5.2, as well as in the examples in
> Appendices A.1-A.4.   As HTTP is binary-clean transport, there is no
> need to indicate this for HTTP-based protocols like EST.  EST server
> implementations SHOULD omit the Content-Transfer-Encoding header if
> they know a priori that EST clients do not rely this field.  EST
> Clients SHOULD expect that the Content-Transfer-Encoding header will
> be absent unless they have an a priori agreement with the EST server.
> The mechanism to establish this client dependency is out-of-scope.
> 
> Notes
> -----
> EST, which is an HTTP-based protocol, erroneous used CTE.  This errata addresses this error.
> 
> Note that the text was reviewed by a RAI AD as well as multiple EST implementors.
> 
> --------------------------------------
> RFC7030 (draft-ietf-pkix-est-09)
> --------------------------------------
> Title               : Enrollment over Secure Transport
> Publication Date    : October 2013
> Author(s)           : M. Pritikin, Ed., P. Yee, Ed., D. Harkins, Ed.
> Category            : PROPOSED STANDARD
> Source              : Public-Key Infrastructure (X.509)
> Area                : Security
> Stream              : IETF
> Verifying Party     : IESG
> 
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix

v2.23.0 | Report a Bug | By Email