Subject: CVResponse [ResponseStatus] may need to change

From: "Faisal" <[email-masked]>
Date: Wed, 4 Jun 2003 12:29:32 +0500

Hi,

When a user requests a SCVPRequest to SCVPServer, and request contains following unsupported fields by SCVPServer

1- scvpversion
2- checks
3- want backs

the SCVPServer will process the request and will send response back with SCVPStatusCode as unsupportedVersion (21)
Now if requestor again sends the same request with scvpversion changes (supported), SCVPServer will send response back with SCVPCode as unsupportedChecks (27) and third time unsupportedWantBacks (28) code.

This will happen because requestor has no knowledge about other unsupported items, and all this will waste time, so what I think to prefer is that a change is CVResponse structure

It should be like this: (Note: blue text is prefered)

Suggested:
CVResponse ::= SEQUENCE {
    scvpVersion                    INTEGER,
    producedAt                    GeneralizedTime,
    responseStatus                SEQUENCE SIZE (1..MAX) OF ResponseStatus,
...
...
            }

instead of existing:

Existing:
CVResponse ::= SEQUENCE {
    scvpVersion                    INTEGER,
    producedAt                    GeneralizedTime,
    responseStatus                ResponseStatus,
...
...
            }

So if we use Suggested ASN.1, SCVPServer can send one response with more than one SCVPStatusCode.

Regards,
Faisal Maqsood       Analyst
     a leading provider of real-time Certificate Validation solutions

 TrustFinderOCSP - provides the latest and most sophisticated OCSP (Online Certificate Status Protocol) server on the market. 

ARP - is an essential plug-in for enabling OCSP client functionality in leading Microsoft® applications.

) Phone: +44 (0) 1784 497 321
& Fax: +44 (0) 1784 497 301
* Email: [email-masked]

Adding Trust to your PKI

www.ascertia.com

The opinions expressed are those of the individual and not the company. Internet communications are not secure and therefore the company does not accept legal responsibility for the contents of this message.  If the reader of this message is not the intended recipient, or the employee responsible for delivering this communication to the intended recipient, you are hereby notified that any disclosure, distribution or copying of this communication is strictly prohibited.