W3C home > Mailing lists > Public > w3c-ietf-xmldsig@w3.org > July to September 2000

Re: X509Data element

From: Joseph M. Reagle Jr. <reagle@w3.org>
Date: Fri, 07 Jul 2000 22:13:32 -0400
Message-Id: <>
To: "David Blondeau" <blondeau@intalio.com>
Cc: "John Boyer" <jboyer@PureEdge.com>, "Donald E. Eastlake 3rd" <dee3@torque.pothole.com>, <w3c-ietf-xmldsig@w3.org>
At 11:43 AM 6/13/00 -0700, David Blondeau wrote:
 >I would like to point 2 things in the section 4.4.4 about the X509Data
 >1)just a typo: in the example, the second X509Data element is supposed to
 >for Certificate B so it should be "Subject of Certificate B" not "Subject
 >Certificate A".

Fixed in forthcoming draft.

       <X509IssuerName>My CA for Certificate A</X509IssuerName>
     <X509SubjectName>Subject of Certificate B</X509SubjectName>

 >2) I think the following paragraph and the schema are in contradiction:
 >"Multiple declarations about a single certificate (e.g., a X509SubjectName
 >and X509IssuerSerial element) MUST be grouped inside a single X509Data
 >element; multiple declarations about the same key but different
 >(related to that single key) MUST be grouped within a single KeyInfo
 >but multiple X509Data elements.[...]"
 >So, a X509Data element MUST correspond to only one certificate but the
 >schema says that there can be 0 or more X509Certificate elements in one
 >X509Data element!
 >The same thing apply to the X509CRL element, could it be more than one CRL
 >by certificate?

Fixed according to Brian's followup.

Joseph Reagle Jr.   
W3C Policy Analyst                mailto:reagle@w3.org
IETF/W3C XML-Signature Co-Chair   http://www.w3.org/People/Reagle/
Received on Friday, 7 July 2000 22:15:59 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 6 January 2015 21:21:34 UTC