Inclusion of Test OIDs for FPKI applicants
- Dominant language
- JavaScript
- Stars
- 16
- Forks
- 14
- PR merge metrics
- No merged PRs in 30d
Description
Recommend including alternative options for acceptability of registered test certificate policy OIDs. Each profile contains acceptable production OIDs and any provided certificate that asserts the test OID should not produce a failure.
There is a 1 to 1 mapping of production OIDs to test OIDs here for both Common and FBCA:
https://www.idmanagement.gov/implement/fpkicite/#appendix-a---test-policy-object-identifiers
Profiles should provide allowances for test OIDs.
Contributor guide
No contributing guide indexed for this repository
Research direction
Locate the Common and FBCA profiles and the validation that handles certificate policy OIDs. Compare their production OID allowances with the production-to-test mappings in the linked Appendix A, then confirm that certificates asserting a mapped test OID are accepted without weakening other policy checks.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 55/100