Re: How to send class info from RA to CA

thayes@netscape.com (Terry Hayes) Wed, 21 March 2001 16:53 UTC

Message-ID: <3AB8DAA6.2040008@netscape.com>
Date: Wed, 21 Mar 2001 08:45:26 -0800
From: thayes@netscape.com
User-Agent: Mozilla/5.0 (Windows; U; WinNT4.0; en-US; m18) Gecko/20001108 SeaMonkey6/6.0
MIME-Version: 1.0
To: Carlisle Adams <carlisle.adams@entrust.com>
CC: 'vivek saraf' <viveksaraf_2000@yahoo.com>, ietf-pkix@imc.org
Subject: Re: How to send class info from RA to CA
References: <DD62792EA182FF4E99C2FBC07E3053BD053FE5@sottmxs09.entrust.com>
Content-Type: multipart/alternative; boundary="------------050505060604090700090909"
Precedence: bulk

As Carlisle has indicated, the certificate template field can include 
data that will indicate the "class" of the request.  A prime candidate 
for this purpose is the certificatePolices extension.  The policy (or 
policies) included in this field should be a good indicator of the type 
of certificate desired.

Terry

Carlisle Adams wrote:

> Hi Vivek,
> 
>       ----------
>       From:   vivek saraf[SMTP:viveksaraf_2000@yahoo.com]
>       Sent:   Wednesday, March 21, 2001 5:08 AM
>       To:     ietf-pkix@imc.org
>       Subject:        How to send class info from RA to CA
>       
>       Hello,
>       
>          I have a CA running which issues multiple classes
>       of certifiactes. Now when RA requests a certifiacte
>       for a user, the RA should specify the class for which
>       it is requesting, but in the PKI message i don't find
>       any field for sending the class information.
>       
>       I have Free text in the PKI Header, if i use this it
>       will not be inter operable.
>       
>       Can any body help me
>       
>  
> How does the issued certificate indicate what class it is?  Is it by 
> some extension, or is it by an indicator somehow embedded in the name 
> of the subject or the issuer?  Whatever mechanism you choose to use, 
> all you have to do is use the same mechanism in the certTemplate in 
> the request message from the RA to the CA.  This is why the 
> certTemplate exists; it allows the requester to specify to the CA 
> exactly the cert contents that are important to them.
> 
> Carlisle.
>

How to send class info from RA to CA vivek saraf
RE: How to send class info from RA to CA Carlisle Adams
Re: How to send class info from RA to CA Terry Hayes
RE: How to send class info from RA to CA vivek saraf