Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

 Date: 2018-11-09

Time: 1415:00-16:00 CEST

Type of meeting: Gotomeeting (https://global.gotomeeting.com/join/704521469)

...

Risto Collanus (Visma / Maventa) eDelivery/TICC CMB

Bård Langöy (Pagero) eDelivery/TICC CMB

Jesper Larsen (Unlicensed) (OpenPEPPOL Operating Office)

...

Agenda

  1. SSL certificate policy


PEPPOL Policy for transport security

  1. Self signed

...

  1. certificates are not allowed (as mentioned in the PEPPOL AS2 specs)
  2. The SSL certificate has to be recognised by both Java and Microsoft since at least 6 months.
  3. Grade "A" TLS configuration according to SSL Labs (https://www.ssllabs.com/ssltest)
  4. Access points are not allowed to tamper with provided trust lists.
  5. A PEPPOL Access Point not graded "A" is considered to be unavailable with regards to the Transport Infrastructure Agreement.


Decisions


Action items

Attachments

Attachments