[Technical Errata Reported] RFC5272 (7379)
RFC Errata System <[email protected]> Wed, 8 Mar 2023 10:51:35 -0800 (PST)
| Newsgroups | gmane.ietf.x509 |
|---|---|
| Message-ID | <[email protected]> |
The following errata report has been submitted for RFC5272, "Certificate Management over CMS (CMC)". -------------------------------------- You may review the report below and at: https://www.rfc-editor.org/errata/eid7379 -------------------------------------- Type: Technical Reported by: Jaime Hablutzel <[email protected]> Section: GLOBAL Original Text ------------- 2.2. Protocol Requests/Responses says: > Simple PKI Response > ... > encapsulatedContentInfo is absent. 4.1. Simple PKI Response says: > The Simple PKI Response consists of a SignedData with no EncapsulatedContentInfo and no SignerInfo. Corrected Text -------------- 2.2. Protocol Requests/Responses should say: > Simple PKI Response > ... > encapContentInfo eContent field is absent. 4.1. Simple PKI Response should say: > The Simple PKI Response consists of a SignedData with no eContent field in the EncapsulatedContentInfo and no SignerInfo. Notes ----- This change is required for consistency with RFC 8551: > 3.8. Creating a Certificate Management Message > The certificate management message or MIME entity is used to > transport certificates and/or Certificate Revocation Lists (CRLs), > such as in response to a registration request. > Step 1. The certificates and/or CRLs are made available to the CMS > generating process that creates a CMS object of type > SignedData. The SignedData encapContentInfo eContent field > MUST be absent, and the signerInfos field MUST be empty. Additionally, RFC 3852 doesn't allow for the absence of the EncapsulatedContentInfo in a SignedData: > The signed-data content type shall have ASN.1 type SignedData: > SignedData ::= SEQUENCE { > version CMSVersion, > digestAlgorithms DigestAlgorithmIdentifiers, > encapContentInfo EncapsulatedContentInfo, > certificates [0] IMPLICIT CertificateSet OPTIONAL, > crls [1] IMPLICIT RevocationInfoChoices OPTIONAL, > signerInfos SignerInfos } Instructions: ------------- This erratum is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party can log in to change the status and edit the report, if necessary. -------------------------------------- RFC5272 (draft-ietf-pkix-2797-bis-07) -------------------------------------- Title : Certificate Management over CMS (CMC) Publication Date : June 2008 Author(s) : J. Schaad, M. Myers Category : PROPOSED STANDARD Source : Public-Key Infrastructure (X.509) Area : Security Stream : IETF Verifying Party : IESG