On Tue, May 11, 1999 at 07:19:42PM +0200, Stefan Kelm wrote:

> This is a problem with the TeleSec certificates. I'm not sure about the
> details but I've spoken to both TeleSec and the BSI ("Bundesamt fuer
> Sicherheit in der Informationstechnik" www.bsi.de) about this problem.
> They are aware of the bug but I don't think they'll change anything because
> of the changes to their (evaluated) software that would be necessary.

According to � 17 (3) SigV,

   [...]�stellt sich heraus, da� best�tigte technische Komponenten
   nicht ausreichend gepr�ft wurden oder Anforderungen nicht erf�llen,
   so kann die zust�ndige Beh�rde erteilte Best�tigungen f�r ung�ltig
   erkl�ren.

Does DIN EN 45011 apply to SigG certification for devices and
products?  If so, what are the SigG Certification Bodies' (<URL:
http://www.bsi.de/aufgaben/projekte/pbdigsig/main/pub.htm>) "documented
procedures for withdrawal of licences, certificates and marks of
conformity" when it comes to violation of functionality specifications
(violation of the standards for BER, in this case)?
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to