ETSI's Bug Tracker - SECURITY
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0006972SECURITYBase Specpublic24-03-2015 16:0424-11-2016 15:15
ReporterNorbert Bissmeyer 
Assigned ToSebastian Muellers 
PrioritynormalSeverityminorReproducibilityalways
StatusresolvedResolutionfixed 
PlatformOSOS Version
Product Version 
Target VersionFixed in Version 
Summary0006972: ITS-S should accept request of unrecognized AA certificate from untrusted sender
DescriptionIn ETSI TS 103 097 v1.1.20 it is not specified whether an ITS-S should accept a request of unrecognized certificate from a sender if the certificate chain of the requester is not complete or trusted.
This is not critical if the AT certificate is requested because every ITS-S that has a new unknown sender in its communication range should add its own certificate to the signer info. However, if the AA certificate is requested the ITS-S has to accept the request even if the message and the signer certificate chain cannot be verified.
Steps To ReproduceAdd in the CAM profile of TS 103 097 in section 7.1 a statement that a receiver shall respond to a request of unrecognized AA certificate even if the certificate chain of the requester cannot be verified.
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
24-03-2015 16:04Norbert BissmeyerNew Issue
24-03-2015 16:42Norbert BissmeyerSeverityminor => feature
24-03-2015 16:44Norbert BissmeyerSeverityfeature => minor
25-03-2015 08:31Norbert BissmeyerDescription Updatedbug_revision_view_page.php?rev_id=116#r116
24-11-2016 15:15Sebastian MuellersNote Added: 0014356
24-11-2016 15:15Sebastian MuellersStatusnew => resolved
24-11-2016 15:15Sebastian MuellersResolutionopen => fixed
24-11-2016 15:15Sebastian MuellersAssigned To => Sebastian Muellers

Notes
(0014356)
Sebastian Muellers   
24-11-2016 15:15   
fixed in base spec V1.2.5