From: Michael Richardson <mcr@sandelman.ca>
To: Richard Hanley <rhanley@google.com>
Cc: OpenBMC Maillist <openbmc@lists.ozlabs.org>
Subject: Re: Survey for Certificate Management Needs
Date: Mon, 04 May 2020 17:21:07 -0400 [thread overview]
Message-ID: <11791.1588627267@localhost> (raw)
In-Reply-To: <CAH1kD+Y1u0CHZ_6PRV8GKmzSq49sg24QD1X99KZRZK=GN-Aedw@mail.gmail.com>
Richard Hanley <rhanley@google.com> wrote:
> 3) Finally we need to
> support revocations lists. AFIAK, there is no support for this today.
What are the certificates you speak of for?
If you are talking about HTTPs end-point certificates for bmcweb, then there
is nothing to do for CRLs, because CRLs aren't a function of the HTTPS
End-Entity certificate you are worried about.
They are provided by the CA, and it's a problem of the HTTP browser to
validate.
So I don't understand your CRL point.
> Finally, I'm expecting we will need an out of band mechanism to talk
> with hardware root of trust (e.g. OpenTitan https://opentitan.org/).
Possibly.
--
] Never tell me the odds! | ipv6 mesh networks [
] Michael Richardson, Sandelman Software Works | IoT architect [
] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails [
next prev parent reply other threads:[~2020-05-04 21:28 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-05-04 18:04 Survey for Certificate Management Needs Richard Hanley
2020-05-04 21:21 ` Michael Richardson [this message]
2020-05-04 22:19 ` Richard Hanley
2020-05-05 0:20 ` Michael Richardson
2020-05-05 2:13 ` Richard Hanley
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=11791.1588627267@localhost \
--to=mcr@sandelman.ca \
--cc=openbmc@lists.ozlabs.org \
--cc=rhanley@google.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.