oasis-tcs / openc2-impl-https

OASIS OpenC2 TC: Repository used by TC members to propose and track changes to the OpenC2 HTTPS implementation specification
Other
7 stars 8 forks source link

Revised for 2-target conformance + misc changes #116

Closed dlemire60 closed 3 years ago

dlemire60 commented 3 years ago

This PR defines testing (non-secure) and operations (secure) conformance targets and allocates conformance requirements accordingly. It also incorporate a number of minor updates throughout associated with splitting the conformance targets and following through with adjustments from PR #114 and PR #115.

alevere commented 3 years ago

Just to be extra clear, I would recommend noting that one must be either testing or operations, but not both. Otherwise, I think it looks pretty good.

dlemire60 commented 3 years ago

Just to be extra clear, I would recommend noting that one must be either testing or operations, but not both.

Is that an essential requirement? For example, it seems that testing vs. operations could just be a "mode" configuration setting for a single implementation: TLS off for testing, TLS on for operations. Frankly, that was more how I'd envisioned it working.

Otherwise, I think it looks pretty good.

Thanks

dlemire60 commented 3 years ago

This PR was discussed at the 8/11/2021 working meeting and approved for merging at the 8/25/2021 working meeting.