Jean-Marc Desperrier wrote:
[snip]
>
> Also couldn't there be circonstances, where we would have to
> generate a new certificate, if the policy changes, etc... ?
In addition, a TSA private key would eventually expire.
When a TSA using a self-signed certificate has to update its key pair, would it also have to generate three (3) certificates (i.e. the OldWithNew, NewWithOld and NewWithNew TSA certificates) as per Section 2.4 of RFC 2510?
Francois
___________________________________
Francois Rousseau
Director of Standards and Conformance
Chrysalis-ITS
1688 Woodward Drive
Ottawa, Ontario, CANADA, K2C 3R7
frousseau@chrysalis-its.com Tel. (613) 723-5076 ext. 419
http://www.chrysalis-its.com Fax. (613) 723-5078