Skip to content

Commit

Permalink
doc: support short name S for state/province (#307)
Browse files Browse the repository at this point in the history
Signed-off-by: Yi Zha <[email protected]>
Co-authored-by: Pritesh Bandi <[email protected]>
  • Loading branch information
yizha1 and priteshbandi authored Aug 2, 2024
1 parent 46854e0 commit 00abcea
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions specs/trust-store-trust-policy.md
Original file line number Diff line number Diff line change
Expand Up @@ -442,9 +442,9 @@ The RDN consists of an attribute type name followed by an equal sign and the str
- The value of each `trustedIdentities` list item, if it begins with `x509.subject:`, MUST be followed by comma-separated one or more RDNs.
Other types of trusted identities may be supported, by using an alternate prefix, or a different format.
For example, `x509.subject: C=${country}, ST=${state}, L=${locallity}, O={organization}, OU=${organization-unit}, CN=${common-name}`.
- Each identity in `identities` list MUST contain country (C), state or province (ST), and organization (O) RDNs.
- Each identity in `identities` list MUST contain country (C), state or province (ST or S), and organization (O) RDNs.
All other RDNs are optional.
The minimal possible value is `x509.subject: C=${country}, ST=${state}, O={organization}`,
The minimal possible value is `x509.subject: C=${country}, ST=${state}, O={organization}` or `x509.subject: C=${country}, S=${state}, O={organization}`.
- `trustedIdentities` list items MUST NOT have overlapping values,
they are considered overlapping if there exists a certificate for which multiple DNs evaluate true. In such case the policy is considered invalid, and will fail at signature verification time when the policy is validated.
For example, the following two identity values are overlapping:
Expand Down

0 comments on commit 00abcea

Please sign in to comment.