[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

SCEP draft 19, getNextCA question / bug report




Hello List ,

I'm a student currently working on the implementation of a automatic root-key roll over for my Diploma work. Implementing the functionality into the open source projects openCA and SSCEP.
I wanted to use the SCEP draft 19  "getNextCA" message but I have one problem there, it is ambiguous at :

5.2.6.1.  GetNextCACert Response


  The response will have a Content-Type of "application/
  x-x509-next-ca-cert".

  The body of this response consists of a SignedData PKCS#7 [
RFC2315],
  as defined in
Section 4.6.1.
  "Content-Type:application/x-x509-ca-ra-cert\n\n"
  <BER-encoded SignedData<BER-encoded degenerate PKCS7>>

                          GetNextCaCert Example

I guess it's an copy and paste error, but should the response Content-Type be "application/x-x509-next-ca-cert" or a "application/x-x509-ca-ra-cert" ?
Also there is no difference if it's only a CA or a CA and RA in the respond I guess. It's a signed PKCS#7, signed by the CA or RA witha degenerate PKCS7 including the next CA /RA certificates.

Also since this draft expires on October when will be the new draft available ?

Kind regards from Germany,

Arkadius Litwinczuk

--

Informationen (einschließlich Pflichtangaben) zu einzelnen, innerhalb der EU tätigen Gesellschaften und Zweigniederlassungen des Konzerns Deutsche Bank finden Sie unter http://www.db.com/de/content/pflichtangaben.htm. Diese E-Mail enthält vertrauliche und/ oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese E-Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser E-Mail ist nicht gestattet.

Please refer to http://www.db.com/en/content/eu_disclosures.htm for information (including mandatory corporate particulars) on selected Deutsche Bank branches and group companies registered or incorporated in the European Union. This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and delete this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden.