[caops-wg] Grid Certificate Profile document update

[David Groep]

Dear all,

I've uploaded an updated version of the Grid Certificate Profile document,
clearing up confusion on the use of the Country (C) attribute in issuer
and subject distinguished names. It's interpretation for the issuer
and subject should be considered differently. The new text in v0.17

The new version reads (in the explanatory footnotes), for issuer (CA) DNs:
  "If a Country (C) component is included in the issuer DN, it SHOULD reflect the
   country in which the issuer is based."
and for subject end-entity DNs:
  "The country (C) asserted in the subject DN of an end-entity certificate 
SHOULD correspond the home country of the end-entity, and thus does not 
necessarily reflect and is not necessarily the same as the country in which the 
CA is operating, or the country code in the issuer DN. Therefore, in such cases 
the Country attribute should not be part of a unique subject DN naming prefix."

The new version is on GridForge:

   https://forge.gridforum.org/sf/go/doc13741 (PDF)
   https://forge.gridforum.org/sf/go/doc13742 (MS Word)

with the comment:
   new version 0.17:
   Clarified use of Country(C) attribute in subject and issuer names



	Regards,
	DavidG.

-- 
David Groep

** National Institute for Nuclear and High Energy Physics, PDP/Grid group **
** Room: H1.56 Phone: +31 20 5922179, PObox 41882, NL-1009DB Amsterdam NL **