ETSI's Bug Tracker - SECURITY | |||||
| View Issue Details | |||||
| ID | Project | Category | View Status | Date Submitted | Last Update |
| 0006890 | SECURITY | TSS&TP | public | 04-03-2015 17:57 | 04-03-2015 17:58 |
| Reporter | Denis Filatov | ||||
| Assigned To | Denis Filatov | ||||
| Priority | normal | Severity | minor | Reproducibility | have not tried |
| Status | resolved | Resolution | fixed | ||
| Platform | OS | OS Version | |||
| Product Version | |||||
| Target Version | Fixed in Version | ||||
| Summary | 0006890: 3d profile messages should have its-aid anyway | ||||
| Description | Mark Etzel [metzel@securityinnovation.com]: On yesterday's call you mentioned there had been some concern about the Generic security profile for other signed messages and ITS-AIDs and asked if there were still concerns. Since I was a couple minutes late, I was muted and couldn't respond, but I'd like to address that now. When we in C2CCC WG Sec made changes in TS 103 097 to remove message_type and security_profile in favor of adding ITS-AID, I had assumed that the change applied to all messages, and that the lack of ITS-AID in the Generic profile was simply an omission. It is my understanding that certificates have permissions to sign particular types of messages; this is accomplished by ITS-AIDs. The list of ITS-AIDs in a certificate permits that certificate to sign any message containing one of those ITS-AIDs. I don't know what certificate is permitted to sign a message with no ITS-AID. And, we identify which certificate to use based on the ITS-AID in the message. William has emailed WG5 about this as well, but we would strongly suggest that the intent was to include an ITS-AID in all messages. Best regards, Mark | ||||
| Steps To Reproduce | |||||
| Additional Information | |||||
| Tags | No tags attached. | ||||
| Relationships | |||||
| Attached Files | |||||
| Issue History | |||||
| Date Modified | Username | Field | Change | ||
| 04-03-2015 17:57 | Denis Filatov | New Issue | |||
| 04-03-2015 17:57 | Denis Filatov | Status | new => assigned | ||
| 04-03-2015 17:57 | Denis Filatov | Assigned To | => Denis Filatov | ||
| 04-03-2015 17:58 | Denis Filatov | Note Added: 0012801 | |||
| 04-03-2015 17:58 | Denis Filatov | Status | assigned => resolved | ||
| 04-03-2015 17:58 | Denis Filatov | Resolution | open => fixed | ||
| Notes | |||||
|
|
|||||
|
|
||||