ETSI's Bug Tracker - SECURITY
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0007308SECURITYTSS&TPpublic14-01-2016 10:0915-01-2016 16:20
Reporterhaddads 
Assigned ToDenis Filatov 
PrioritynormalSeverityminorReproducibilityhave not tried
StatusresolvedResolutionfixed 
PlatformOSOS Version
Product Version 
Target VersionNext VersionFixed in Version 
Summary0007308: [TP_SEC_ITSS_SND_CERT_AA_06_01_BV] Time start and end equal ?
DescriptionThe summary says that it checks if time_end is greater than the
time_start. The test in fact test if it is greater or equal. Does it
have any meanings if it's equal ? Shouldn't the validity time be
forced to be at least greater than a lower value. Otherwise producing
certificates valid only one second could be used for DoS attacks
forcing constant renewal of the certificates.
Steps To Reproduce
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
14-01-2016 10:09haddadsNew Issue
14-01-2016 10:09haddadsStatusnew => assigned
14-01-2016 10:09haddadsAssigned To => Denis Filatov
15-01-2016 16:20Denis FilatovCheckin
15-01-2016 16:20Denis FilatovNote Added: 0013699
15-01-2016 16:20Denis FilatovStatusassigned => resolved
15-01-2016 16:20Denis FilatovResolutionopen => fixed

Notes
(0013699)
Denis Filatov   
15-01-2016 16:20   
fix 0007308
Check start < end instead of start <= end
TP is modified to support all 3 types of time validity restrictions for future use of other certificates.
U /branches/STF507/requality/TS103096/root/Requirements/SEC_ITSS/SEC_ITSS_SND/SEC_ITSS_SND_CERT/SEC_ITSS_SND_CERT_08/TP_SEC_ITSS_SND_CERT_08_01_BV.json [^]
U /branches/STF507/requality/TS103096/root/Requirements/SEC_ITSS/SEC_ITSS_SND/SEC_ITSS_SND_CERT/SEC_ITSS_SND_CERT_08.json [^]