Changes between Version 5 and Version 6 of GeniApiCertificates


Ignore:
Timestamp:
04/19/12 12:02:01 (8 years ago)
Author:
Aaron Helsinger
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • GeniApiCertificates

    v5 v6  
    9191
    9292=== Validation ===
    93 To be valid, certificates must
     93To be valid, certificates must:
    9494 - Follow the format rules above
    9595 - Expire later than the current time
     
    101101   - Essentially, The authority name of the signer must be a prefix of the subject name. EG: `a\.b` is an authority for, `a\.b.c.d`, but `a` is not an authority for, `a\.b.c.d` (the subject's name starts with `a.b`, where we've escaped the `.`). Also any authority name is an authority for itself.
    102102
     103For sample python code to validate GENI certificates, see http://git.planet-lab.org/?p=sfa.git;a=tree;f=sfa/trust;hb=HEAD, or the [http://trac.gpolab.bbn.com/gcf/ GCF package], under `gcf/src/sfa/trust`.
     104
    103105=== Hierarchy ===
    104106