Re: Updates prior to the release of cryptlib 3.3.4/3.4.0

Hi,

Sorry for intruding, but is it not considered a very bad idea to have 
technology specific legislation? I know that the UN have developed model 
laws that are technology neutral, which they recommend that nations 
adopt. http://www.uncitral.org/

Is it not also common to use embedding of OCSP responses (or CRLs) for 
long term validation? This is something that Adobe had had support for 
for a long time.

Regards,
Tomas


On 03/25/2010 01:34 PM, Peter Rybar wrote:
>
>> disabled in the last few releases without anyone noticing). Can you
>> provide a
>> convincing argument that it's worth supporting this when the other
>> SigG stuff
>> was present for probably ten years or so without (AFAIK) anyone ever
>> using it?
>
> Single OCSP extension CertHash is mandatory for OCSP response also in
> the Slovak Republic secondary legislation.
> http://www.nbusr.sk/en/electronic-signature/legislation/index.html
> It is implemented in the NSA Root CA in long term OCSP service and also
> in accredited CA like http://www.disig.sk/
> It is also implemented in latest Adobe Acrobat, Reader.
>
> In Germany:
> I do not know where the list of German applications that has used it is
> published but at least
> https://www.openlimit.com/en/products/cc-sign-eng.html
> https://www.bsi.bund.de/ContentBSI/EN/Topics/Certification/newcertificates.html
>
>
>
>
> Technically the Slovak NSA Root CA long term OCSP service is created
> according to
> http://www.nbusr.sk/en/electronic-signature/approved-formats/index.html
> http://www.nbusr.sk/ipublisher/files/nbusr.sk/elektronicky-podpis/formats/formats_crl_ocsp_en.pdf
>
>
> Such OCSP extension CertHash simplifies the verification process of
> electronic signatures especially of QES and expired certificates.
>
>
>> How are you getting this error? That is, what do I need to do to
>> reproduce
>> it?
> I will try to debug the loading of CL32.dll and the place where the
> memory is overwritten.
>
> Peter
>
> _______________________________________________
> Cryptlib mailing list
> [email protected] via Mail:
> [email protected]
> Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
> http://news.gmane.org/gmane.comp.encryption.cryptlib
> Posts from non-subscribed addresses are blocked to prevent spam, please
> subscribe in order to post messages.


_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.