Re: [pkix] review of draft-ietf-pkix-rfc2560bis-15

> Those fields are not treated in any special way depending on what status
you
> provide in a response.
This statement is no longer true with 2560bis since OCSP is no longer
equivalent to CRLs

Excerpt from Section 4.2.2
~~~~~~~~~~~~~~~~~~~~
The thisUpdate and nextUpdate fields define a recommended validity interval.
This interval corresponds to the {thisUpdate, nextUpdate}  interval in CRLs.

  .....
Responses where the nextUpdate value   is not set are equivalent to a CRL
with no time for nextUpdate (see  Section 2.4).
End
~~~

In case of revoked for non-issued, thisUpdate should probably be the start
validity of CA certificate and next Update should be current time + skew.

-Piyush

> -----Original Message-----
> From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf Of
> Stefan Santesson
> Sent: Tuesday, April 02, 2013 8:55 AM
> To: Peter Rybar; sts@aaa-sec.com
> Cc: pkix@ietf.org
> Subject: Re: [pkix] review of draft-ietf-pkix-rfc2560bis-15
> 
> Peter,
> 
> Those fields are not treated in any special way depending on what status
you
> provide in a response.
> 
> /Stefan
> 
> 
> On 4/2/13 3:36 PM, "Peter Rybar" <rybar@nbusr.sk> wrote:
> 
> >Stefan,
> >
> >When revoked for "not-issued" is created by OCSP server then according
> >to actual rfc2560bis is unclear, what must be included in thisUpdate
> >and nextUpdate fields.
> >Rfc2560bis must also define rules for value of thisUpdate and
> >nextUpdate fields.
> >
> >
> >RFC 2560:
> >   - thisUpdate: The time at which the status being indicated is known
> >                 to be correct
> >   - nextUpdate: The time at or before which newer information will be
> >                 available about the status of the certificate
> >
> >
> >Peter
> >
> >_______________________________________________
> >pkix mailing list
> >pkix@ietf.org
> >https://www.ietf.org/mailman/listinfo/pkix
> 
> 
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix