GSA / GSA/fpkilint

Inclusion of Test OIDs for FPKI applicants

Open
#79 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
16
Forks
14
PR merge metrics
No merged PRs in 30d

Description

Recommend including alternative options for acceptability of registered test certificate policy OIDs. Each profile contains acceptable production OIDs and any provided certificate that asserts the test OID should not produce a failure.

There is a 1 to 1 mapping of production OIDs to test OIDs here for both Common and FBCA:
https://www.idmanagement.gov/implement/fpkicite/#appendix-a---test-policy-object-identifiers

Profiles should provide allowances for test OIDs.

Contributor guide

No contributing guide indexed for this repository

Research direction

Locate the Common and FBCA profiles and the validation that handles certificate policy OIDs. Compare their production OID allowances with the production-to-test mappings in the linked Appendix A, then confirm that certificates asserting a mapped test OID are accepted without weakening other policy checks.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.