OASIS Key Management Interoperability Protocol (KMIP) TC

 View Only
  • 1.  clause 10 question regarding SSL/TLS

    Posted 10-28-2009 20:48
    
    
    
    
    
    Question for the group.  Do KMIP servers support BOTH SSL and TLS?  What does the notation with a "/"  mean? Can this be clarified please? Is TLS v1.0 the best to spec?
     
    I believe in clause 10 it currently says:
       
          • If a KMIP Server uses TCP/IP for KMIP messaging, then it SHALL support SSL v3.1/TLS v1.0 or later and may support other protocols as specified in the KMIP Profiles document.


  • 2.  RE: [kmip] clause 10 question regarding SSL/TLS

    Posted 10-28-2009 21:00
    
    
    
    
    
    I interpret the '/' as meaning 'or'.
     
    Rod
     


    From: Larry.Hofer@Emulex.Com [mailto:Larry.Hofer@Emulex.Com]
    Sent: Wednesday, October 28, 2009 3:48 PM
    To: kmip@lists.oasis-open.org
    Cc: Larry.Hofer@Emulex.Com
    Subject: [kmip] clause 10 question regarding SSL/TLS

    Question for the group.  Do KMIP servers support BOTH SSL and TLS?  What does the notation with a "/"  mean? Can this be clarified please? Is TLS v1.0 the best to spec?
     
    I believe in clause 10 it currently says:
       
          • If a KMIP Server uses TCP/IP for KMIP messaging, then it SHALL support SSL v3.1/TLS v1.0 or later and may support other protocols as specified in the KMIP Profiles document.

    The information contained in this transmission may be confidential. Any disclosure, copying, or further distribution of confidential information is not permitted unless such privilege is explicitly granted in writing by Quantum Corporation. Furthermore, Quantum Corporation is not responsible for the proper and complete transmission of the substance of this communication or for any delay in its receipt.