Signed Receipt Requests

Graeme Lunt <[email protected]> Tue, 16 Oct 2001 09:33:11 +0100
Newsgroups gmane.ietf.sfl
Message-ID <[email protected]>
Hi,
 
These are a couple of observations from using the SignedReceipt support in
the SFL - 
they are not bugs, rather perhaps feature requests.
 
I am trying to add an X.500 distinguished name as a GeneralName into the
receiptsTo
field, in addition to an X.400 address. This is to help receiving user
agents encrypt the
signed receipt if required - 
RFC 2634 section 2.4 (last para) states:
"All sending agents that support the generation of ESS signed receipts MUST
provide
the ability to send encrypted signed receipts".
 
However the code (in sm_Attr.cpp) in CSM_Attrib::SetReceiptRequest
 
a) prevents me from adding an X.500 DN ("MUST BE rfc822 OR x400Address")
There is a comment in the code that says "According to CMS Spec, MUST be 1
on these 2 types" - 
but I'm not sure what this reference is (RFC 2634 2.2 step 4.?)
 
b) only allows me to specify a single general name to a "receiptTo". A
single GeneralName
would be OK if I could specify a DN, as I could look up in the email address
of where to send
the signed receipt - but see a)
 
The basic change required is to allow the setting of multiple GeneralName
components for
a receiptsTo, which is not a minor change. Are there any plans to do this?
 
Graeme