Subject: draft-ietf-pkix-rfc2510bis-02 syntax question

From: Ari Kermaier <[email-masked]>
Date: Thu, 04 Jan 2001 17:42:53 -0500

An inconsistency between the text and the ASN.1 module:

3.3.18 Certificate Confirmation content

       CertStatus ::= SEQUENCE {
          certHash    OCTET STRING,
          -- the hash of the certificate, using the same hash algorithm
          -- as is used to create and verify the certificate signature
          certReqId   INTEGER,
          -- to match this confirmation with the corresponding req/rep
          statusInfo  PKIStatusInfo OPTIONAL
       }

Appendix F: "Compilable" ASN.1 Module using 1988 Syntax

   CertStatus ::= SEQUENCE {
      certHash    OCTET STRING,
      -- the hash of the certificate, using the same hash algorithm
      -- as is used to create and verify the certificate signature
      statusInfo  PKIStatusInfo OPTIONAL
   }

Any clarification would be appreciated.

Ari Kermaier
Phaos Technology