Array of Certificates
"Asad" <[email protected]> (by way of Joseph Reagle <[email protected]>) Mon, 8 Jul 2002 09:15:00 -0400
| Newsgroups | gmane.ietf.xmldsig |
|---|---|
| Organization | W3C |
| Message-ID | <[email protected]> |
Hi all,
I want to place more than one certificate in the X509Data
element(Signer Certificate and its corresponding chain of certificates).
Is it mandatory to place all the certificates in order, ie signer
certificate first and followed by its CA and so on, or can I place the
certificates in any order.
and also I want to know ,while signature verification, If I receive a chain
of certificates, should I take the certificate placed first as the signer
certificate, or should I do any checking using the
X509IssuerSerial/X509SKI element to determine where the signer certificate
is.
Thanks in advance
regards
Asad
Attachment: 1
(text/html, 1.8 KB)
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=Content-Type content="text/html; charset=iso-8859-1"> <META content="MSHTML 5.50.4522.1800" name=GENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=#ffffff> <DIV><FONT face="Courier New" color=#0000ff>Hi all,</FONT></DIV> <DIV><FONT face="Courier New" color=#0000ff> I want to place more than one certificate in the X509Data element(Signer Certificate and its corresponding chain of certificates).</FONT></DIV> <DIV><FONT face="Courier New" color=#0000ff></FONT> </DIV> <DIV><FONT face="Courier New" color=#0000ff>Is it mandatory to place all the certificates in order, ie signer certificate first and followed by its CA and so on,</FONT></DIV> <DIV><FONT face="Courier New" color=#0000ff>or can I place the certificates in any order.</FONT></DIV> <DIV><FONT face="Courier New" color=#0000ff></FONT> </DIV> <DIV><FONT face="Courier New" color=#0000ff>and also I want to know ,while signature verification, If I receive a chain of certificates,</FONT></DIV> <DIV><FONT face="Courier New" color=#0000ff>should I take the certificate placed first as the signer certificate, or should I do any</FONT></DIV> <DIV><FONT face="Courier New" color=#0000ff>checking using the X509IssuerSerial/X509SKI element to determine where the signer certificate is.</FONT></DIV> <DIV><FONT face="Courier New" color=#0000ff></FONT> </DIV> <DIV><FONT face="Courier New" color=#0000ff>Thanks in advance</FONT></DIV> <DIV><FONT face="Courier New" color=#0000ff>regards</FONT></DIV> <DIV><FONT face="Courier New" color=#0000ff>Asad</FONT></DIV> <DIV><FONT face="Courier New" color=#0000ff></FONT> </DIV> <DIV><FONT face="Courier New" color=#0000ff></FONT> </DIV></BODY></HTML>