Invalid Key Status with ValidReason?

• From: Yunhao Zhang <yzhang@sqldata.com>
• Date: Wed, 20 Oct 2004 19:22:56 -0400
• To: <www-xkms@w3.org>
• Message-ID: <002801c4b6fb$cf7d2bf0$6422fecc@sqldata.com>

Should a service provider returns ValidReason even the key binding is
invalid? For instance, is the following valid?

<xkms:Status StatusValue="xkms:Invalid">
  <xkms:ValidReason>xkms:IssuerTrust</xkms:ValidReason>
  <xkms:ValidReason>xkms:Signature</xkms:ValidReason>
  <xkms:IndeterminateReason>xkms:RevocationStatus</xkms:IndeterminateReason>
  <xkms:InvalidReason>xkms:ValidityInterval</xkms:InvalidReason>
  </xkms:Status>

This is a result from a Validate request of an expired X.509 cert, where the
service provider successfully verified issurer trust and the signature, but
was unable to obtain CRL from the issuer.

Regards,
Yunhao

Received on Wednesday, 20 October 2004 23:30:16 UTC