Skip to content

Commit 00abcea

Browse files
yizha1priteshbandi
andauthored
doc: support short name S for state/province (#307)
Signed-off-by: Yi Zha <[email protected]> Co-authored-by: Pritesh Bandi <[email protected]>
1 parent 46854e0 commit 00abcea

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

specs/trust-store-trust-policy.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -442,9 +442,9 @@ The RDN consists of an attribute type name followed by an equal sign and the str
442442
- The value of each `trustedIdentities` list item, if it begins with `x509.subject:`, MUST be followed by comma-separated one or more RDNs.
443443
Other types of trusted identities may be supported, by using an alternate prefix, or a different format.
444444
For example, `x509.subject: C=${country}, ST=${state}, L=${locallity}, O={organization}, OU=${organization-unit}, CN=${common-name}`.
445-
- Each identity in `identities` list MUST contain country (C), state or province (ST), and organization (O) RDNs.
445+
- Each identity in `identities` list MUST contain country (C), state or province (ST or S), and organization (O) RDNs.
446446
All other RDNs are optional.
447-
The minimal possible value is `x509.subject: C=${country}, ST=${state}, O={organization}`,
447+
The minimal possible value is `x509.subject: C=${country}, ST=${state}, O={organization}` or `x509.subject: C=${country}, S=${state}, O={organization}`.
448448
- `trustedIdentities` list items MUST NOT have overlapping values,
449449
they are considered overlapping if there exists a certificate for which multiple DNs evaluate true. In such case the policy is considered invalid, and will fail at signature verification time when the policy is validated.
450450
For example, the following two identity values are overlapping:

0 commit comments

Comments
 (0)