Re: I-D ACTION:draft-ietf-pkix-scvp-31.txt

["David A. Cooper" <david.cooper@xxxxxxxx>]

All,

The only changes that were made in draft -31 of SCVP were corrections of 
typographic errors, mainly misspellings in words that were used to 
create ASN.1 terms.  A diff file highlighting the changes between drafts 
-30 and -31 is available at 
http://csrc.nist.gov/pki/documents/PKIX/wdiff_draft-ietf-pkix-scvp-30_to_31.html.

The following changes were made to the ASN.1 module (none of which 
change the DER encoding of objects):

1) In CVRequest, changed reqestExtensions to requestExtensions (missing 
"u" in request).

2) In SCVPCertID, added "algorithm" in front of sha-1, so that it no 
longer implicit that sha-1 is the value for "algorithm" rather than 
"parameters".  SCVPCertID is now:

      SCVPCertID ::= SEQUENCE {
          certHash        OCTET STRING,
          issuerSerial    SCVPIssuerSerial,
          hashAlgorithm   AlgorithmIdentifier DEFAULT { algorithm sha-1 } }

3) In CVStatus code, changed inhibitPolicyMappingUnsuported to 
inhibitPolicyMappingUnsupported (missing "p" in Unsupported) and changed 
validityTimeUnsupported to validationTimeUnsupported (error code is 
intended to indicate that the server does not support the validationTime 
item in Query).

4) In HashValue, added "algorithm" in front of sha-1, as was done with 
SCVPCertID.

      HashValue ::= SEQUENCE {
        algorithm         AlgorithmIdentifier DEFAULT { algorithm sha-1 },
        value             OCTET STRING }

5) In ReplyStatus, changed unavailableValidityTime to 
unavailableValidationTime, since error code indicates that historical 
data for the time specified in validationTime in the request is not 
available.

6) In ValPolResponse, changed maxCVResponseVersion to 
maxCVRequestVersion and changed maxVPResponseVersion to 
maxVPRequestVersion, since these terms were referred to as 
max...RequestVersion everywhere except the ASN.1 and since the semantics 
(sections 6.2 and 6.3) are that they indicate that maximum version 
numbers that the server accepts for requests.

7) Also in ValPolResponse, changed validationPolices to 
validationPolicies (added the final "i" in Policies).

Dave

Internet-Drafts@xxxxxxxx wrote:
> A New Internet-Draft is available from the on-line Internet-Drafts 
> directories.
> This draft is a work item of the Public-Key Infrastructure (X.509) Working Group of the IETF.
>
> 	Title		: Server-based Certificate Validation Protocol (SCVP)
> 	Author(s)	: A. Malpani, et al.
> 	Filename	: draft-ietf-pkix-scvp-31.txt
> 	Pages		: 86
> 	Date		: 2007-1-15
> 	
> SCVP allows a client to delegate certificate path construction and
>    certificate path validation to a server.  The path construction or
>    validation (e.g., making sure that none of the certificates in the
>    path are revoked) is performed according to a validation policy,
>    which contains one or more trust anchors.  It allows simplification
>    of client implementations and use of a set of predefined validation
>    policies.
>
> A URL for this Internet-Draft is:
> http://www.ietf.org/internet-drafts/draft-ietf-pkix-scvp-31.txt
>