⌕ Поиск по атласу

IETF · RFC · RFC10007

RFC10007 · Clarification to Processing Key Usage Values During Certificate Revocation List (CRL) Validation

Clarification to Processing Key Usage Values During Certificate Revocation List (CRL) Validation

RFC 5280 defines the profile of X.509 certificates and Certificate Revocation Lists (CRLs) for use in the Internet. Section 4.2.1.3 of RFC 5280 requires CRL issuer certificates to contain the keyUsage extension with the cRLSign bit asserted. However, the CRL validation algorithm specified in Section 6.3 of RFC 5280 does not explicitly include a corresponding check for the presence of the keyUsage certificate extension. This document updates RFC 5280 to require that check.

Официальная английская аннотация

RFC 5280 defines the profile of X.509 certificates and Certificate Revocation Lists (CRLs) for use in the Internet. Section 4.2.1.3 of RFC 5280 requires CRL issuer certificates to contain the keyUsage extension with the cRLSign bit asserted. However, the CRL validation algorithm specified in Section 6.3 of RFC 5280 does not explicitly include a corresponding check for the presence of the keyUsage certificate extension. This document updates RFC 5280 to require that check.

Связи документа

updates: RFC5280

Официальный источник · 2026-06-01

Полные импортированные сведения карточки
{
  "id": "RFC10007",
  "number": 10007,
  "title_en": "Clarification to Processing Key Usage Values During Certificate Revocation List (CRL) Validation",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "RFC 5280 defines the profile of X.509 certificates and Certificate Revocation Lists (CRLs) for use in the Internet. Section 4.2.1.3 of RFC 5280 requires CRL issuer certificates to contain the keyUsage extension with the cRLSign bit asserted. However, the CRL validation algorithm specified in Section 6.3 of RFC 5280 does not explicitly include a corresponding check for the presence of the keyUsage certificate extension. This document updates RFC 5280 to require that check.",
  "authors": [
    "C. Bonnell",
    "T. Ito",
    "T. Okubo"
  ],
  "organizations": [],
  "publication_date": "2026-06-01",
  "current_status": "PROPOSED STANDARD",
  "current_status_ru": "Предлагаемый стандарт",
  "publication_status": "PROPOSED STANDARD",
  "publication_status_ru": "Предлагаемый стандарт",
  "lifecycle": "active",
  "lifecycle_ru": "Действующий",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "sec",
  "area_ru": "Безопасность",
  "working_group": "lamps",
  "source_draft": "draft-ietf-lamps-keyusage-crl-validation-04",
  "page_count": 6,
  "doi": "10.17487/RFC10007",
  "keywords": [
    "Public Key Infrastructure",
    "Certificate validation",
    "Security"
  ],
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [
      "RFC5280"
    ],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc10007/",
    "html": "https://www.rfc-editor.org/rfc/rfc10007.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc10007.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc10007/"
  }
}