Feedback regarding FIA_X509_EXT.1 testing

commoncriteria / X509

The Unlicense

0 stars 0 forks source link

Feedback regarding FIA_X509_EXT.1 testing #27

Open jfisherbah opened 2 months ago

jfisherbah commented 2 months ago

FIA_X509_EXT.1 Test 9 talks about handling revoked certificates. It is recommended that this be clarified that revocation needs to be checked for the leaf certificate as well as any intermediate CA certificates in the chain, assuming that this is actually the desired behavior

jfisherbah commented 3 weeks ago

Test updated to state that it is repeated on intermediate non-trust store elements (i.e. not just the root CA). Believe this can be closed.