Re: [sidr] [Sidrops] [Technical Errata Reported] RFC6487 (6854)

Terry Manderson <terry@terrym.net> Tue, 10 May 2022 12:47 UTC

Return-Path: <terry@terrym.net>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 24770C159827 for <sidr@ietfa.amsl.com>; Tue, 10 May 2022 05:47:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=terrym-net.20210112.gappssmtp.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LhJ6EugzkxUv for <sidr@ietfa.amsl.com>; Tue, 10 May 2022 05:47:01 -0700 (PDT)
Received: from mail-pj1-x1035.google.com (mail-pj1-x1035.google.com [IPv6:2607:f8b0:4864:20::1035]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 71E74C159820 for <sidr@ietf.org>; Tue, 10 May 2022 05:47:01 -0700 (PDT)
Received: by mail-pj1-x1035.google.com with SMTP id cu23-20020a17090afa9700b001d98d8e53b7so1916589pjb.0 for <sidr@ietf.org>; Tue, 10 May 2022 05:47:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=terrym-net.20210112.gappssmtp.com; s=20210112; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=vqHndUc8JI5eC/JX9nfsI7UzbQ8UhlXA4uRdCDIhJkM=; b=vBc+9eh3txm/XG2ffawEJC2ThzycBsI7MB0rGN/bZuYZnOBI3tC/mSaSuUg7UcuGTJ EJYgh19MDjtYDSg9lVm/NwxxShrkC2TXLkn9DjQ14rZnuXco8tu/I0CrRrllKawQKHNJ ekCrI2D7I6Qgi6+zAo0ppGBc8Kh6t7CkdLu02Lp46tNeVGDD2aE3qRTqVKSZ5zJl/sqC CyYjrKy50vCK3O745j8/D95wfkmV9iq717tHnwBETkm6PHv/qKzlaO2k5uvctNHJ8Gvw 9irvKZKwItBrZUjZQqoxGfbmMTrclFE+M2E8XHvaXBcXiN1rnUDCtDqNSpcreiiUQotW ETug==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=vqHndUc8JI5eC/JX9nfsI7UzbQ8UhlXA4uRdCDIhJkM=; b=fZu8DipOAbOsKo0U1Qr1FR0DVT+8k/S4OFOu0ecSoDvCjJQIC3NvKeQZ4S48M4sgLc JNlkoyj2rg3iBQYAKSEHCVTOp+tneb4OPN3pvBN5RsDVZpP5AW63ULnZqLGXZk2wBvqN J4OYjyxpMCHkElQ7eiszgoqkZRJsbRs6yhQbTDhRMS3mtJD7RH28CE291uUpwRZCgpGt K9HqnHWgBYdIotKpSnKNqsE5J4ZYwAoRZHMyfNGQSmYwSo/j2tj70eXbSvMUB55/UJER 7wpmyDYBrXX3brXFLgz8DQLUHHqKYAs4jO/N/M7lgtFvRmTA9KicEtgn26CT+Mom7jWH A1gw==
X-Gm-Message-State: AOAM531op05+srBZxP4kR/IfvcUptniSBaC2qXDMUt3dipcbgm+9xX2f kBFbyBKmnN4vuCctguRnvc4FAA==
X-Google-Smtp-Source: ABdhPJxa6bBBPRsx+GVPG7XFy0MHEW/GPR0p5UAYA8ImJyDb+jHrMlBkEwNf0mYm+KNjLYCciRHs+Q==
X-Received: by 2002:a17:90b:3142:b0:1dc:c4c9:cdf8 with SMTP id ip2-20020a17090b314200b001dcc4c9cdf8mr26927890pjb.125.1652186820550; Tue, 10 May 2022 05:47:00 -0700 (PDT)
Received: from smtpclient.apple ([1.128.198.18]) by smtp.gmail.com with ESMTPSA id pi7-20020a17090b1e4700b001d2edf4b513sm1746597pjb.56.2022.05.10.05.46.56 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 10 May 2022 05:47:00 -0700 (PDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 15.0 \(3693.40.0.1.81\))
From: Terry Manderson <terry@terrym.net>
In-Reply-To: <YnobEvvvrFGMG0B3@snel>
Date: Tue, 10 May 2022 22:46:51 +1000
Cc: John Scudder <jgs=40juniper.net@dmarc.ietf.org>, "sidrops@ietf.org" <sidrops@ietf.org>, "sidr@ietf.org" <sidr@ietf.org>, Chris Morrow <morrowc@ops-netman.net>, Corey Bonnell <Corey.Bonnell@digicert.com>, "robertl@apnic.net" <robertl@apnic.net>, "martin.vigoureux@nokia.com" <martin.vigoureux@nokia.com>, George Michaelson <ggm@apnic.net>
Content-Transfer-Encoding: quoted-printable
Message-Id: <4553CF72-DA14-479F-B006-76F2A71F1822@terrym.net>
References: <20220216174658.65B404C1CE@rfc-editor.org> <E88BA6FA-9871-42FB-8B56-08ABBF375AA0@apnic.net> <DM6PR14MB218608968CAE1AF1311895F192359@DM6PR14MB2186.namprd14.prod.outlook.com> <75B90D51-F1F3-41F2-8142-D14997F59526@juniper.net> <YnobEvvvrFGMG0B3@snel>
To: Job Snijders <job=40fastly.com@dmarc.ietf.org>
X-Mailer: Apple Mail (2.3693.40.0.1.81)
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidr/L6UXnSiFDzJS299hEE42er_l39E>
Subject: Re: [sidr] [Sidrops] [Technical Errata Reported] RFC6487 (6854)
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidr/>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 May 2022 12:47:05 -0000

I've read, and re-read (several times), the errata text.

I read Geoff's confusion and shared that belief. I then read Job's historical context. And shifted my posture slightly.

With that context it clarified an understanding how others have read (including me) 6487.

SoooOOOOooo..

I now read this with simplified logic: 

"The Basic Constraints extension field is critical and MUST be present when the "cA" field is TRUE, otherwise it MUST NOT be present.

(which aligns to to the historical text and context - and clarifies my my own understanding)

T.

> On 10 May 2022, at 5:58 pm, Job Snijders <job=40fastly.com@dmarc.ietf.org> wrote:
> 
> Hi,
> 
> Earlier versions of RFC 6487 contained slightly more verbose guidance:
> https://datatracker.ietf.org/doc/html/draft-ietf-sidr-res-certs-18#section-4.9.1
> """
>   4.9.1.  Basic Constraints
> 
>   The Basic Constraints extension identifies whether the Subject of the
>   certificate is a CA and the maximum depth of valid certification
>   paths that include this certificate.
> 
>   The Issuer determines whether the "cA" boolean is set.  If this bit
>   is set, then it indicates that the Subject is allowed to issue
>   resources certificates within this overall framework (i.e. the
>   Subject is a CA).
> 
>   The Path Length Constraint is not specified in this profile and MUST
>   NOT be present.
> 
>   The Basic Constraints extension field is a critical extension in the
>   Resource Certificate profile, and MUST be present when the Subject is
>   a CA, and MUST NOT be present otherwise.
> """
> 
> To me it seems the original intent was along the lines of "and that's
> the range of choices available to you".
> 
> This errata report helps reduce a potential for confusion: there simply
> are no valid circumstances in which a certificate contains a Basic
> Constaints extension with "CA:FALSE".
> 
> Kind regards,
> 
> Job
> 
> On Mon, May 09, 2022 at 09:18:13PM +0000, John Scudder wrote:
>> +sidrops
>> -rfc-editor
>> 
>> Taking on faith that Corey’s description here is right, it does sound as though there’s an error in RFC 6487. I also don’t understand Geoff’s earlier comment that the erratum is implicitly adding “And thats the range of choices available to you”. Assuming Corey is right, it would be appropriate to verify the erratum
>> 
>> However before taking action I’d appreciate it if someone else with expertise in PKIX (i.e., not me) were to confirm. Don’t all speak up at once. ;-)
>> 
>> Thanks,
>> 
>> —John
>> 
>>> On Feb 16, 2022, at 5:41 PM, Corey Bonnell <Corey.Bonnell@digicert.com> wrote:
>>> 
>>> Geoff,
>>> If the Basic Constraints extension is omitted then it is not possible to set the "cA" field to any value, as it is a field within the Basic Constraints extension.
>>> 
>>> The original language says, "The issuer determines whether the "cA" boolean is set.". We know from the current text that the Basic Constraints extension is prohibited in end-entity certificates. Therefore, the "cA" field does not exist in an end-entity certificate. As a result, the only possible value for "cA" in all cases where the field is present is "true", as that field may only exist in CA certificates. It is an RFC 5280 profile violation if a CA certificate contains a Basic Constraints extension with a "cA" field value of false.
>>> 
>>> Thanks,
>>> Corey
>>> 
>>> -----Original Message-----
>>> From: Geoff Huston <gih@apnic.net> 
>>> Sent: Wednesday, February 16, 2022 5:23 PM
>>> To: RFC Errata System <rfc-editor@rfc-editor.org>
>>> Cc: George Michaelson <ggm@apnic.net>; robertl@apnic.net; aretana.ietf@gmail.com; jgs@juniper.net; martin.vigoureux@nokia.com; Chris Morrow <morrowc@ops-netman.net>; sandy@tislabs.com; Corey Bonnell <Corey.Bonnell@digicert.com>; sidr@ietf.org
>>> Subject: Re: [Technical Errata Reported] RFC6487 (6854)
>>> 
>>> Frankly I am having some trouble in understanding what is going on here. 
>>> 
>>> The original says “You can issue anything you want. IF you want to issue a CA cert then you MUST use Basic Constraints and set the CA bit. If you want to issue a EE cert then you MUST omit Basic Constraints.”
>>> 
>>> What the document does not say is “And thats the range of choices available to you” Implicitly thats what this report is trying to add, and I’m not sure that the original RFC went that far to limit the issuer’s options in this manner.
>>> 
>>> I would argue that this is not an error in the original RFC. The reporter is trying to add to the original RFC, but doing so via an errata report seems to me to be inappropriate.
>>> 
>>> Therefore I tend toward rejecting this on the basis that the report is not a report of an error in the RFC.
>>> 
>>> Geoff
>>> 
>>> 
>>> 
>>> 
>>>> On 17 Feb 2022, at 4:46 am, RFC Errata System <rfc-editor@rfc-editor.org> wrote:
>>>> 
>>>> The following errata report has been submitted for RFC6487, "A Profile 
>>>> for X.509 PKIX Resource Certificates".
>>>> 
>>>> --------------------------------------
>>>> You may review the report below and at:
>>>> https://www.rfc-editor.org/errata/eid6854
>>>> 
>>>> --------------------------------------
>>>> Type: Technical
>>>> Reported by: Corey Bonnell <corey.bonnell@digicert.com>
>>>> 
>>>> Section: 4.8.1
>>>> 
>>>> Original Text
>>>> -------------
>>>> The Basic Constraints extension field is a critical extension in the
>>>> resource certificate profile, and MUST be present when the subject is
>>>> a CA, and MUST NOT be present otherwise.
>>>> 
>>>> The issuer determines whether the "cA" boolean is set.
>>>> 
>>>> Corrected Text
>>>> --------------
>>>> The Basic Constraints extension field is a critical extension in the
>>>> resource certificate profile, and MUST be present when the subject is
>>>> a CA, and MUST NOT be present otherwise.
>>>> 
>>>> If this extension is present, then the "cA" field MUST be true.
>>>> 
>>>> Notes
>>>> -----
>>>> The original text is contradictory. If the basicConstraints extension is prohibited in end-entity certificates, then it follows that whenever the extension is present in a certificate, that certificate is a CA certificate. If the certificate is a CA certificate, then the "cA" boolean MUST be true in all cases. It is nonsensical to allow a "cA" field value of false.
>>>> 
>>>> Instructions:
>>>> -------------
>>>> This erratum is currently posted as "Reported". If necessary, please 
>>>> use "Reply All" to discuss whether it should be verified or rejected. 
>>>> When a decision is reached, the verifying party can log in to change 
>>>> the status and edit the report, if necessary.
>>>> 
>>>> --------------------------------------
>>>> RFC6487 (draft-ietf-sidr-res-certs-22)
>>>> --------------------------------------
>>>> Title               : A Profile for X.509 PKIX Resource Certificates
>>>> Publication Date    : February 2012
>>>> Author(s)           : G. Huston, G. Michaelson, R. Loomans
>>>> Category            : PROPOSED STANDARD
>>>> Source              : Secure Inter-Domain Routing
>>>> Area                : Routing
>>>> Stream              : IETF
>>>> Verifying Party     : IESG
>>> 
>> 
>> _______________________________________________
>> Sidrops mailing list
>> Sidrops@ietf.org
>> https://www.ietf.org/mailman/listinfo/sidrops
> 
> _______________________________________________
> sidr mailing list
> sidr@ietf.org
> https://www.ietf.org/mailman/listinfo/sidr