[pkix] Indirect CRLs

"Erik Andersen" <era@x500.eu> Mon, 16 November 2015 09:48 UTC

Return-Path: <era@x500.eu>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com []) by ietfa.amsl.com (Postfix) with ESMTP id BB8A61B2F61 for <pkix@ietfa.amsl.com>; Mon, 16 Nov 2015 01:48:03 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 1.11
X-Spam-Level: *
X-Spam-Status: No, score=1.11 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HELO_EQ_DK=1.009, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=no
Received: from mail.ietf.org ([]) by localhost (ietfa.amsl.com []) (amavisd-new, port 10024) with ESMTP id 3FW0S8D_29Qq for <pkix@ietfa.amsl.com>; Mon, 16 Nov 2015 01:48:01 -0800 (PST)
Received: from mail02.dandomain.dk (mail02.dandomain.dk []) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BB9BE1B2F5E for <pkix@ietf.org>; Mon, 16 Nov 2015 01:48:00 -0800 (PST)
Received: from Morten ([]) by mail02.dandomain.dk (DanDomain Mailserver) with ASMTP id 2201511161047562348; Mon, 16 Nov 2015 10:47:56 +0100
From: "Erik Andersen" <era@x500.eu>
To: "PKIX" <pkix@ietf.org>
Date: Mon, 16 Nov 2015 10:47:56 +0100
Message-ID: <002701d12053$dee21d30$9ca65790$@x500.eu>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_0028_01D1205C.40A72170"
X-Mailer: Microsoft Outlook 15.0
Thread-Index: AdEgUpQSh0EPzqcbR7ewecWdDAmdKw==
Content-Language: en-gb
Archived-At: <http://mailarchive.ietf.org/arch/msg/pkix/3_aXvnbTgoE62zFpvX8n5KDg8tg>
Cc: Directory list <x500standard@freelists.org>
Subject: [pkix] Indirect CRLs
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/pkix/>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Nov 2015 09:48:04 -0000

I have a question related to indirect CRLs. RFC 5280 in Section 5:


If the scope of the CRL includes one or more certificates issued by

an entity other than the CRL issuer, then it is an indirect CRL.


If a CA has delegated CRL issuing to another entity, but this entity only
issues revocation status for certificates issued by that CA, is the CRL then
an indirect CRL?