Dear Ben,

 

Thank you for bringing up this topic. Concerning the sentence “*We have 
previously instructed CAs that when there is no CRL, they should put an 
empty JSON array in this field,* "[]" I have the following question (please 
excuse my ignorance): 

To which case does the above mentioned sentence refer to?

   1. The CA does *not issue* a CRL *at all* (e.g. because it relies on 
   OCSP only or because it issues short-lived certificates for which no 
   revocation services are provided).
   2. The CA issues a full CRL only, *no partitioned* CRLs are issued and 
   therefore no array of partitioned CRLs is provided.

Thanks in advance for your answer.


Best regards

Adrian


Adrian M. Mueller

Product Manager Certificate Services

 

+41 43 811 05 97

[email protected]

 


Ben Wilson schrieb am Freitag, 10. März 2023 um 20:22:27 UTC+1:

> All,
> The CCADB currently has a field titled, "JSON Array of Partitioned CRLs".
> We have previously instructed CAs that when there is no CRL, they should 
> put an empty JSON array in this field, "[]".  A problem has arisen when 
> this field is populated via API. When this notation for an empty array is 
> submitted to the CCADB via API, it is dropped. So, I'm wondering whether we 
> should adopt some other, consistent notation that will work with the API 
> and for everyone who might use the information from this field in the 
> CCADB. (I don't like the idea of just leaving this field empty, because 
> that is the default when no information has been provided by the CA.) 
> Any advice is appreciated.
> Thanks,
> Ben
>

-- 
You received this message because you are subscribed to the Google Groups 
"CCADB Public" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/ccadb.org/d/msgid/public/8bcf98c4-f8f8-4a35-a994-d83291d941e9n%40ccadb.org.

Reply via email to