Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
Juniper Networks M/T/J series Routers
CRP237 		Crunchy Certified PostgreSQL v9.5
21.0.03/TSE-CCCS-33
name Juniper Networks M/T/J series Routers Crunchy Certified PostgreSQL v9.5
category Network and Network-Related Devices and Systems Databases
scheme UK TR
not_valid_after 05.03.2013 09.06.2019
not_valid_before 01.04.2007 09.06.2016
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/CRP237.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/Certification%20Report%20-%20Crunchy.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/JUNOS%208%201R1%20ST%20v1%200.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/Security%20Target%20-%20Crunchy%20-%20Version%201.6%20-%2020160509.pdf
manufacturer Juniper Networks, Inc. Crunchy Data Solutions Inc.
manufacturer_web https://www.juniper.net/ https://crunchydata.com/
security_level EAL3+, ALC_FLR.3 EAL2+, ALC_FLR.2
dgst 449de5c1b966be87 1be0865a3af6b498
heuristics/cert_id CRP237 21.0.03/TSE-CCCS-33
heuristics/indirect_transitive_cves CVE-2023-22407, CVE-2024-39528, CVE-2022-22215, CVE-2013-4689, CVE-2024-39555, CVE-2023-28975, CVE-2022-22242, CVE-2023-36840, CVE-2022-22244, CVE-2014-3818, CVE-2024-30380, CVE-2019-0036, CVE-2024-39549, CVE-2022-22208, CVE-2021-31372, CVE-2022-22214, CVE-2024-39511, CVE-2023-28962, CVE-2024-39514, CVE-2023-36841, CVE-2024-39558, CVE-2013-6618, CVE-2023-44182, CVE-2023-28979, CVE-2022-22241, CVE-2014-0613, CVE-2023-44184, CVE-2023-44175, CVE-2022-22243, CVE-2013-4686, CVE-2014-0615, CVE-2023-44186, CVE-2023-22406, CVE-2023-36839, CVE-2022-22224, CVE-2022-22238, CVE-2014-2712, CVE-2023-28964, CVE-2023-44177, CVE-2024-39556, CVE-2022-22181, CVE-2022-22162, CVE-2022-22163, CVE-2023-28963, CVE-2004-0230, CVE-2023-36842, CVE-2023-44194, CVE-2004-0468, CVE-2022-22220, CVE-2023-44201, CVE-2023-44197, CVE-2014-0616, CVE-2013-6014, CVE-2024-21594, CVE-2024-39517, CVE-2024-21591, CVE-2022-22156, CVE-2013-7313, CVE-2023-4481, CVE-2013-6170, CVE-2021-31362, CVE-2022-22197, CVE-2022-22245, CVE-2022-22173, CVE-2023-44178, CVE-2024-30397, CVE-2022-22246, CVE-2023-22395, CVE-2023-36843, CVE-2023-44185, CVE-2014-2714, CVE-2023-22391, CVE-2023-44176 {}
heuristics/extracted_sars ALC_DVS.1, ATE_COV.2, ADV_RCR.1, ADV_FSP.1, ADV_HLD.2, ATE_FUN.1, AGD_USR.1, AVA_MSU.1, ATE_IND.2, AGD_ADM.1, AVA_VLA.1, ALC_FLR.3, ATE_DPT.1, AVA_SOF.1 ASE_INT.1, AVA_VAN.2, ADV_FSP.2, ASE_ECD.1, ASE_TSS.1, ASE_SPD.1, ALC_DEL.1, AGD_OPE.1, AGD_PRE.1, ALC_CMS.2, ADV_TDS.1, ATE_FUN.1, ATE_COV.1, ADV_ARC.1, ASE_OBJ.2, ALC_FLR.2, ASE_REQ.2, ALC_CMC.2, ATE_IND.2, ASE_CCL.1
heuristics/extracted_versions - 9.5
heuristics/report_references/directly_referenced_by CRP248 {}
heuristics/report_references/indirectly_referenced_by CRP248, CRP258 {}
heuristics/protection_profiles {} 3f6ac99252bbf14e
maintenance_updates
protection_profile_links {} https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0088b_pdf.pdf
pdf_data/report_filename CRP237.pdf Certification Report - Crunchy.pdf
pdf_data/report_keywords/cc_cert_id
  • UK:
    • CRP237: 1
  • TR:
    • 21.0.03/TSE-CCCS-33: 2
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL3: 1
    • EAL3 augmented: 1
  • EAL:
    • EAL 2+: 1
    • EAL2+: 4
    • EAL4: 1
pdf_data/report_keywords/cc_sar
  • ALC:
    • ALC_FLR.3: 1
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.2: 1
    • ADV_TDS.1: 1
  • AGD:
    • AGD_OPE.1: 1
  • ALC:
    • ALC_CMC.2: 1
    • ALC_CMS.2: 1
    • ALC_DEL: 1
    • ALC_FLR.2: 6
  • ASE:
    • ASE_INT.1: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_IND.2: 1
pdf_data/report_keywords/cc_sfr
  • FIA:
    • FIA_SOS.1: 1
pdf_data/report_keywords/cc_claims
  • A:
    • A.CRYPTO: 1
    • A.EAUTH: 1
    • A.LOCATE: 1
    • A.NOEVIL: 1
    • A.TIME: 1
  • A:
    • A.AUTHUSER: 1
    • A.CONNECT: 1
    • A.MANAGE: 1
    • A.NO_GENERAL_PURPOSE: 1
    • A.PEER: 1
    • A.PHYSICAL: 1
    • A.SUPPORT: 1
    • A.TRAINEDUSER: 1
  • T:
    • T.ACCESS_TSFDATA: 1
    • T.ACCESS_TSFFUNC: 1
    • T.IA_MASQUERADE: 1
    • T.RESIDUAL_DATA: 1
    • T.TSF_COMPROMISE: 1
    • T.UNAUTHORIZED_ACCESS: 1
pdf_data/report_keywords/hash_function
  • MD:
    • MD5:
      • MD5: 1
pdf_data/report_keywords/crypto_protocol
  • SSH:
    • SSH: 6
  • TLS:
    • SSL:
      • SSL: 5
  • TLS:
    • SSL:
      • SSL: 2
pdf_data/report_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 1
pdf_data/report_keywords/standard_id
  • CC:
    • CCIMB-2005-08-001: 1
    • CCIMB-2005-08-002: 1
    • CCIMB-2005-08-003: 1
  • CC:
    • CCMB-2012-09-004: 1
  • ISO:
    • ISO/IEC 17025: 2
  • RFC:
    • RFC 1321: 2
pdf_data/report_keywords/javacard_packages
  • org:
    • org.tr: 1
pdf_data/report_keywords/certification_process
  • OutOfScope:
    • Audit Extension e PostGIS Spatial Extensions 2.4.1.2 Components and Capabilities that are Out of Scope The following Crunchy Certified PostgreSQL 9.5 components are out of scope and thus not included in: 1
    • Out of Scope: 1
    • out of scope: 1
    • platforms are included in the TOE. In addition, the following components in the IT environment are out of scope: e Authenticator servers, if configured; and e Terminal emulator 2.4.2 Logical Scope of the TOE 2: 1
pdf_data/report_metadata
  • /Author: leithe
  • /CreationDate: D:20070503115940Z
  • /Creator: PScript5.dll Version 5.2
  • /ModDate: D:20070514111611+01'00'
  • /Producer: GPL Ghostscript 8.15
  • /Title: Microsoft Word - LFS T532 CR 10.doc
  • pdf_file_size_bytes: 654197
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 22
  • /CreationDate: D:20160715145628+02'00'
  • /Creator: Canon iR-ADV C5240 PDF
  • /Producer: Adobe PSL 1.2e for Canon
  • pdf_file_size_bytes: 1639551
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 24
pdf_data/st_filename JUNOS 8 1R1 ST v1 0.pdf Security Target - Crunchy - Version 1.6 - 20160509.pdf
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL 3: 1
    • EAL 3 augmented: 1
    • EAL3: 7
    • EAL3 augmented: 5
  • EAL:
    • EAL2: 3
    • EAL2 augmented: 2
pdf_data/st_keywords/cc_sar
  • ACM:
    • ACM_CAP.3: 3
    • ACM_SCP.1: 3
  • ADO:
    • ADO_DEL.1: 3
    • ADO_IGS.1: 4
  • ADV:
    • ADV_FSP.1: 3
    • ADV_HLD.2: 2
    • ADV_RCR.1: 2
  • AGD:
    • AGD_ADM.1: 3
    • AGD_USR.1: 2
  • ALC:
    • ALC_DVS.1: 2
    • ALC_FLR.3: 10
  • ATE:
    • ATE_COV.2: 2
    • ATE_DPT.1: 2
    • ATE_FUN.1: 2
    • ATE_IND.2: 2
  • AVA:
    • AVA_MSU.1: 2
    • AVA_SOF.1: 2
    • AVA_VLA.1: 3
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.2: 1
    • ADV_TDS.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.2: 1
    • ALC_CMS.2: 1
    • ALC_DEL.1: 1
    • ALC_FLR.2: 4
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.2: 1
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_ARP.1: 7
    • FAU_ARP.1.1: 1
    • FAU_GEN.1: 10
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_GEN.2: 7
    • FAU_GEN.2.1: 1
    • FAU_SAA.1: 7
    • FAU_SAA.1.1: 1
    • FAU_SAA.1.2: 1
    • FAU_SAR.1: 7
    • FAU_SAR.1.1: 1
    • FAU_SAR.1.2: 1
    • FAU_STG.1: 7
    • FAU_STG.1.1: 1
    • FAU_STG.1.2: 1
  • FDP:
    • FDP_IFC.1: 7
    • FDP_IFC.1.1: 1
    • FDP_IFF.1: 11
    • FDP_IFF.1.1: 1
    • FDP_IFF.1.2: 1
    • FDP_IFF.1.3: 1
    • FDP_IFF.1.4: 1
    • FDP_IFF.1.5: 1
    • FDP_IFF.1.6: 1
    • FDP_ROL.1: 7
    • FDP_ROL.1.1: 1
    • FDP_ROL.1.2: 1
  • FIA:
    • FIA_AFL.1: 1
    • FIA_ATD.1: 8
    • FIA_ATD.1.1: 1
    • FIA_SOS.1: 9
    • FIA_SOS.1.1: 1
    • FIA_UAU.1: 2
    • FIA_UAU.2: 9
    • FIA_UAU.2.1: 1
    • FIA_UAU.5: 10
    • FIA_UAU.5.1: 2
    • FIA_UAU.5.2: 2
    • FIA_UID.1: 1
    • FIA_UID.2: 9
    • FIA_UID.2.1: 1
  • FMT:
    • FMT_MOF: 16
    • FMT_MOF.1: 2
    • FMT_MSA.3: 10
    • FMT_MSA.3.1: 1
    • FMT_MSA.3.2: 1
    • FMT_MTD: 41
    • FMT_MTD.1: 6
    • FMT_SMF.1: 12
    • FMT_SMF.1.1: 1
    • FMT_SMR.1: 13
    • FMT_SMR.1.1: 1
  • FPT:
    • FPT_RVM.1: 7
    • FPT_RVM.1.1: 1
    • FPT_SEP.1: 7
    • FPT_SEP.1.1: 1
    • FPT_SEP.1.2: 1
    • FPT_STM.1: 8
    • FPT_STM.1.1: 1
  • FTA:
    • FTA_TSE.1: 7
    • FTA_TSE.1.1: 1
  • FTP:
    • FTP_STM.1: 1
  • FAU:
    • FAU_GEN.1: 4
    • FAU_GEN.1.1: 3
    • FAU_GEN.1.2: 2
    • FAU_GEN.2: 4
    • FAU_GEN.2.1: 3
    • FAU_SEL.1: 7
    • FAU_SEL.1.1: 1
  • FDP:
    • FDP_ACC.1: 12
    • FDP_ACC.1.1: 1
    • FDP_ACF.1: 6
    • FDP_ACF.1.1: 3
    • FDP_ACF.1.2: 2
    • FDP_ACF.1.3: 3
    • FDP_ACF.1.4: 2
    • FDP_RIP.1: 6
    • FDP_RIP.1.1: 1
  • FIA:
    • FIA_ATD.1: 10
    • FIA_ATD.1.1: 3
    • FIA_UAU.1: 4
    • FIA_UAU.1.1: 3
    • FIA_UAU.1.2: 2
    • FIA_UID.1: 5
    • FIA_UID.1.1: 3
    • FIA_UID.1.2: 2
    • FIA_USB.1: 5
  • FMT:
    • FMT_MOF.1: 8
    • FMT_MOF.1.1: 1
    • FMT_MSA.1: 6
    • FMT_MSA.1.1: 1
    • FMT_MSA.3: 5
    • FMT_MSA.3.1: 3
    • FMT_MSA.3.2: 2
    • FMT_MTD.1: 5
    • FMT_MTD.1.1: 3
    • FMT_REV.1: 13
    • FMT_REV.1.1: 7
    • FMT_REV.1.2: 8
    • FMT_SMF.1: 5
    • FMT_SMF.1.1: 2
    • FMT_SMR.1: 7
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 2
  • FPT:
    • FPT_TRC.1: 7
    • FPT_TRC.1.1: 1
    • FPT_TRC.1.2: 1
  • FTA:
    • FTA_MCS.1: 5
    • FTA_MCS.1.1: 3
    • FTA_MCS.1.2: 2
    • FTA_TSE.1: 4
    • FTA_TSE.1.1: 3
pdf_data/st_keywords/cc_claims
  • A:
    • A.CRYPTO: 4
    • A.EAUTH: 2
    • A.LOCATE: 4
    • A.NOEVIL: 3
    • A.TIME: 4
  • O:
    • O.ACCESS: 16
    • O.AMANAGE: 18
    • O.AUDIT: 17
    • O.EADMIN: 9
    • O.EAL: 6
    • O.FLOW: 12
    • O.MANAGE: 1
    • O.PROTECT: 19
    • O.ROLBAK: 4
  • OE:
    • OE.ADMIN: 3
    • OE.CRYPTO: 4
    • OE.EAUTH: 4
    • OE.PHYSICAL: 3
    • OE.TIME: 4
  • T:
    • T.CONFLOSS: 5
    • T.MANDAT: 4
    • T.NOAUDIT: 2
    • T.OPS: 7
    • T.PRIVIL: 7
    • T.ROUTE: 10
    • T.THREAT: 4
  • A:
    • A.AUTHUSER: 2
    • A.CONNECT: 2
    • A.MANAGE: 2
    • A.NO_GENERAL_PURPOSE: 2
    • A.PHYSICAL: 2
    • A.SUPPORT: 2
    • A.TRAINEDUSER: 2
  • O:
    • O.ACCESS_HISTORY: 8
    • O.ADMIN_ROLE: 8
    • O.AUDIT_GENERATION: 6
    • O.DISCRETIONARY_ACCESS: 6
    • O.MANAGE: 10
    • O.MEDIATE: 8
    • O.RESIDUAL_INFORMATION: 8
    • O.TOEACCESS: 1
    • O.TOE_ACCESS: 17
  • OE:
    • OE.ADMIN: 11
    • OE.INFO_PROTECT: 19
    • OE.IT_REMOTE: 9
    • OE.IT_TRUSTED_SYSTEM: 9
    • OE.NO_GENERAL_PURPOSE: 7
    • OE.PHYSICAL: 7
  • T:
    • T.ACCESS_TSFDATA: 2
    • T.ACCESS_TSFFUNC: 2
    • T.IA_MASQUERADE: 3
    • T.IA_USER: 2
    • T.RESIDUAL_DATA: 2
    • T.TSF_COMPROMISE: 3
    • T.UNAUTHORIZED_ACCESS: 3
pdf_data/st_keywords/hash_function
  • MD:
    • MD5:
      • MD5: 4
pdf_data/st_keywords/crypto_protocol
  • SSH:
    • SSH: 22
  • TLS:
    • SSL:
      • SSL: 8
  • TLS:
    • SSL:
      • SSL: 14
pdf_data/st_keywords/standard_id
  • RFC:
    • RFC 1321: 4
    • RFC 1413: 2
    • RFC 1964: 1
    • RFC 2743: 1
    • RFC 4510: 1
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • accidental or deliberate corruption via use of digitally signed binaries. 2.4.1.3 Summary of items out of scope of the TOE There are no security functionality claims relating to the following items: • All: 1
    • out of scope: 2
    • prior to any exchange. This covers all services used to exchange information, including telnet (out of scope), SSH, SSL, and FTP 1 . Authentication services can be handled either internally (user selected: 1
  • OutOfScope:
    • Audit Extension PostGIS Spatial Extensions 1.5.10.2 Components and Capabilities that are Out of Scope The following Crunchy Certified PostgreSQL 9.5 components are out of scope and thus not included in: 1
    • Out of Scope: 3
    • are prohibited in the evaluated configuration. See Section 1.5.10.2 for further details regarding Out of Scope Configuration Options. Note: The MD5 implementation is vendor developed to the RFC 1321: 1
    • methods are outside the scope of this evaluation. 1.5.10.3 Configuration Options that are Out of Scope. 1.5.10.3.1 “Trust” authentication option (not in TOE) When the trust authentication option is: 1
    • out of scope: 1
    • platforms are included in the TOE. In addition, the following components in the IT environment are out of scope: Authenticator servers, if configured; and Terminal emulator 1.5.10.4.3 Functional Dependencies: 1
pdf_data/st_metadata
  • /Author: CESG
  • /CreationDate: D:20070420105539Z
  • /Creator: PScript5.dll Version 5.2
  • /ModDate: D:20120106151752Z
  • /Producer: GPL Ghostscript 8.15
  • /Subject: Security Target for Juniper Networks M/T/J Series Families of Service Routers running JUNOS 8.1R1
  • /Title: JUNOS 8.1R1 ST v1_0.doc
  • pdf_file_size_bytes: 231235
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 41
  • /Author: Paul Laurence
  • /CreationDate: D:20160715155933+03'00'
  • /Creator: Microsoft® Word 2013
  • /ModDate: D:20160715155933+03'00'
  • /Producer: Microsoft® Word 2013
  • pdf_file_size_bytes: 1528693
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 80
state/report/convert_garbage False True
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different