Project

General

Profile

Actions

Feature #5113

open

Override certificate name parts in KeyLocator

Added by Junxiao Shi almost 4 years ago. Updated almost 2 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
5.00 h

Description

Since #5112, KeyLocator can contain either a key name or a certificate name.
When the validator operates in a network environment that uses a distinct certificate chain than what appears in the KeyLocator, it may be necessary to override parts of the certificate name before fetching certificate.

This feature is to introduce an "issuer id override" option in certificate fetcher, configurable through ValidatorConfig.
After specifying this option to be <issuer-id>:

  • For KeyLocator name that is a key name /<subject>/KEY/<key-id>, certificate retrieval Interest should be /<subject>/KEY/<key-id>/<issuer-id> CanBePrefix=true.
  • For KeyLocator name that is a certificate name with a different issuer id /<subject>/KEY/<key-id>/<issuer-other>/<version>, certificate retrieval Interest should be /<subject>/KEY/<key-id>/<issuer-id> CanBePrefix=true.
  • For KeyLocator name that is a certificate name with the same issuer id /<subject>/KEY/<key-id>/<issuer-id>/<version>, certificate retrieval Interest should be /<subject>/KEY/<key-id>/<issuer-id>/<version> CanBePrefix=false (i.e. unchanged).

Related issues 1 (0 open1 closed)

Blocked by ndn-cxx - Feature #5112: Include certificate name in KeyLocatorClosedJunxiao Shi

Actions
Actions #1

Updated by Junxiao Shi almost 4 years ago

Cross-project links:
https://github.com/named-data-iot/ndn-lite/issues/73

python-ndn and NDNts do not yet have trust schema validator, so that this feature isn't needed there.

Actions #2

Updated by Junxiao Shi almost 4 years ago

  • Blocked by Feature #5112: Include certificate name in KeyLocator added
Actions #3

Updated by Alex Afanasyev almost 4 years ago

  • Tags set to security
Actions #4

Updated by Junxiao Shi almost 2 years ago

  • Description updated (diff)
Actions

Also available in: Atom PDF