[lamps] Minor change to draft-ietf-lamps-lightweight-cmp-profile-17 on Section 4.3.4 CRL Update Retrieval

["Brockhaus, Hendrik" <[e-mail]>]

Roman, Russ, all

During implementation of the support message it-crlStatusList in OpenSSL 
one minor correction and a clarification was proposed by David.

@Roman, Russ, is it OK to implement this change with version -18 of this 
draft? If this is too late, or if we need more time for discussion, please let 
me know.

Hendrik 

This is the proposed clarification:

OLD
   The EE MUST identify the requested CRL either by its CRL distribution
   point name or issuer name.  The CRL distribution point name can
   either be provided from the CRL distribution points extension of the
   certificate to be validated or from the issuing distribution point
   extension from the CRL to be updated.  If a thisUpdate value was
   given, the PKI management entity MUST return the latest available CRL
   if this CRL has a more recent thisUpdate time.  Otherwise, the
   infoValue in the response message MUST be absent.

NEW
   The EE MUST identify the requested CRL either by a CRL distribution
   point name or issuer name.

   Note: CRL distribution point names can be obtained from a
   cRLDistributionPoints extension of a certificate to be validated or
   from an issuingDistributionPoint extension of the CRL to be updated.
   CRL issuer names can be obtained from the cRLDistributionPoints
   extension of a certificate, from the issuer field of the
   authority key identifier extension of a certificate or CRL,
   and from the issuer field of a certificate or CRL.

   If a thisUpdate value was given, the PKI management entity MUST
   return the latest CRL available from the referenced source if this
   CRL is more recent than the given thisUpdate time.  If no
   thisUpdate value was given, it MUST return the latest CRL
   available from the referenced source.  In all other cases the 
   infoValue in the response message MUST be absent.


This is the minor correction:
It is in line with the syntax specified in CMP Updates Section 2.17:
      GenMsg:    {id-it 22}, SEQUENCE SIZE (1..MAX) OF CRLStatus
      GenRep:    {id-it 23}, SEQUENCE SIZE (1..MAX) OF
                               CertificateList  |  < absent >
      CRLSource ::= CHOICE {
         dpn          [0] DistributionPointName,
         issuer       [1] GeneralNames }
      CRLStatus ::= SEQUENCE {
         source       CRLSource,
         thisUpdate   Time OPTIONAL } 
The first element to mention in Section 4.3 is always InfoValue, here 
followed by source.

OLD
         CRLSource               REQUIRED
       -- MUST contain a sequence of one CRLSource structure

NEW
         InfoValue               REQUIRED
       -- MUST contain a sequence of one CRLStatus element
             source           REQUIRED