[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Putting a certificate on hold with CMP (and removing it)

To: ietf-pkix@xxxxxxx
Subject: Putting a certificate on hold with CMP (and removing it)
From: Teemu Alakoski <teemu.alakoski@xxxxxxxx>
Date: Wed, 26 Apr 2006 10:09:14 +0300
List-archive: <http://www.imc.org/ietf-pkix/mail-archive/>
List-id: <ietf-pkix.imc.org>
List-unsubscribe: <mailto:ietf-pkix-request@imc.org?body=unsubscribe>
Sender: owner-ietf-pkix@xxxxxxxxxxxx
User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915

Hi,

To my understanding, CMP can be used to put a certificate on hold using crlEntryDetails field of the RevReqContent structure. This is achieved by using a crlEntryDetails that contains a certificateHold CRLReason. Is it, however, possible to remove the hold status from a certificate with CMP?

Apparently removeFromCRL CRLReason can't be used for this purpose because it is, according to ISO/IEC 9594-8:2001, for use with delta-CRLs only. To me it seems that using this reason code in RevReqContent to remove certificate's hold status is not what the designers of the CMP meant.

Teemu

Follow-Ups:
- Re: Putting a certificate on hold with CMP (and removing it)
  - From: Peter Gutmann

Prev by Date: Reminder - Submission Deadline for The Second Cryptographic Hash Workshop Approaching (5/12/2006)
Next by Date: Delivery (ietf-pkix@xxxxxxx)
Previous by thread: Reminder - Submission Deadline for The Second Cryptographic Hash Workshop Approaching (5/12/2006)
Next by thread: Re: Putting a certificate on hold with CMP (and removing it)
Index(es):
- Date
- Thread