[lamps] [CMP Updates] Requesting a current CRL

["Brockhaus, Hendrik" <[e-mail]>]

There are situations where CMP is used on networks that do not offer http or coap, but other transport protocols specified at IEEE or IEC.
In such case we use the general message as defined in RFC 4210 Section 5.3.19.6 (https://datatracker.ietf.org/doc/html/rfc4210#section-5.3.19.6) for requesting CRLs.
Currently the CMP server always send its most current CRL, regardless if the CMP client already has this CRL.
To avoid sending the same CRL multiple times, we would like to extend the mechanism sending only more current CRLs than the CMP client already has.

Together with John Gray from Entrust, who we also like to add as co-author to the CMP Updates Draft, we discussed mainly two implementation options.

Option 1:
Define a new generalInfo field to be provided in the request messages header of the general message specified in RFC 4210 Section 5.3.19.6. This ITAV shall contain the thisUpdate time of the most current CRL the CMP client has. The CMP server shall return its CRL if it is more current and otherwise with an empty body.

Option 2:
Define a new general message type. Sending this new general message, the CMP client requests the thisUpdate time of the most current CRL the CMP server has. If this is more current than the most current CRL the CMP client has, it requests this CRL using the general message specified in RFC 4210 Section 5.3.19.6. 

The authors would prefer option 1. What is the opinion of the WG?

BTW, this is the last open issue of this draft. The authors hope that the next update will be the last before WGLC.

Hendrik


Siemens AG
Technology - Research in Digitalization and Automation
Security Architecture
mailto:[e-mail]

www.siemens.com

Siemens Aktiengesellschaft: Chairman of the Supervisory Board: Jim Hagemann Snabe; Managing Board: Roland Busch, Chairman, President and Chief Executive Officer; Cedrik Neike, Matthias Rebellius, Ralf P. Thomas, Judith Wiese; Registered offices: Berlin and Munich, Germany; Commercial registries: Berlin-Charlottenburg, HRB 12300, Munich, HRB 6684; WEEE-Reg.-No. DE 23691322