Re: [Sidrops] proposed, revised text for Section 6

[Stephen Kent <[e-mail]>]

Job,
> On Thu, May 07, 2020 at 11:38:21AM -0400, Stephen Kent wrote:
>> What do we want to do if we encounter two or more .crl files in a
>> manifest?  use the first one, ignore any others, and issue a warning?
> Which one is the first one? The fileList is an (unordered) sequence of
> FileAndHash objects, right?

The ASN.1 for fileList is a SEQUENCE. In ASN.1 terms, this means it is 
ordered. A SET is used to represent an unordered collection of data 
items. So there is no ambiguity about ordering of files here.

> Shouldn't standard X509 be followed here? Only use the CRL that the .cer
> points to? I was under the impression that the CRL exists as part of the
> X509 validation, rather than as part of the 'RPKI validation overlay'?

This document focuses on how to use a manifest to decide which files at 
a pub point are to be processed, which is why I thought about the issue 
of multiple CRLs from that perspective. But, I agree that we ought to 
rely first on the CRL identified by the the CRLDP in the CA cert, and 
then confirm that the manifest includes that file. If we adopt that 
approach, the ordering or .crl files in a manifestwill not be relevant.

Steve