Subject: SCVP CertReply Status

From: "Faisal Maqsood" <[email-masked]>
Date: Wed, 15 Sep 2004 17:32:05 +0500

Hi,

SCVP draft 15, section 4.8 replyObjects, CertReply structure:
  1.. If server chooses replyStatus as MalformedPKC (3), MalformedAC (4), UnrecognizedCertPolicy (5) or UnrecognizedExtension (7), how is it possible to set ReplyChecks and/or ReplyWantBacks in this case?
  2.. If server chooses replyStatus as UnrecognizedValPolicy (6), is it possible that server process the whole request? I think this status code should belong to CVResponse instead of CertReply
  3.. If server chooses replyStatus as CertPathNotValidNow (12) and reason is that server can not connect to OCSPResponder/LDAPServer and so have no revocation information for the time being then what should server put in ReplyWantBacks?
Can someone clarify?

Regards,
Faisal