Dear Ben, Thank you for bringing up this topic. Concerning the sentence “*We have previously instructed CAs that when there is no CRL, they should put an empty JSON array in this field,* "[]" I have the following question (please excuse my ignorance):
To which case does the sentence refer to? 1. The CA does *not issue* a CRL *at all* (e.g. because it relies on OCSP only or because it issues short-lived certificates for which no revocation services are provided). 2. The CA issues a full CRL only, *no partitioned* CRLs are issued and therefore no array of partitioned CRLs is provided. Thanks in advance for your answer. Best regards Adrian Adrian M. Mueller Product Manager Certificate Services +41 43 811 05 97 [email protected] Am Sa., 11. März 2023 um 05:40 Uhr schrieb <[email protected]>: > [email protected] > <https://groups.google.com/a/ccadb.org/forum/?utm_source=digest&utm_medium=email#!forum/public/topics> > Google > Groups > <https://groups.google.com/a/ccadb.org/forum/?utm_source=digest&utm_medium=email/#!overview> > <https://groups.google.com/a/ccadb.org/forum/?utm_source=digest&utm_medium=email/#!overview> > Topic digest > View all topics > <https://groups.google.com/a/ccadb.org/forum/?utm_source=digest&utm_medium=email#!forum/public/topics> > > - Empty JSON Array of Partitioned CRLs > <#m_6205175037828154458_group_thread_0> - 1 Update > > Empty JSON Array of Partitioned CRLs > <http://groups.google.com/a/ccadb.org/group/public/t/e3b3aa38e405cdb2?utm_source=digest&utm_medium=email> > Ben Wilson <[email protected]>: Mar 10 12:22PM -0700 > > All, > The CCADB currently has a field titled, "JSON Array of Partitioned CRLs". > We have previously instructed CAs that when there is no CRL, they should > put an empty JSON array in this field, "[]". A problem has arisen when > this field is populated via API. When this notation for an empty array is > submitted to the CCADB via API, it is dropped. So, I'm wondering whether we > should adopt some other, consistent notation that will work with the API > and for everyone who might use the information from this field in the > CCADB. (I don't like the idea of just leaving this field empty, because > that is the default when no information has been provided by the CA.) > Any advice is appreciated. > Thanks, > Ben > Back to top <#m_6205175037828154458_digest_top> > You received this digest because you're subscribed to updates for this > group. You can change your settings on the group membership page > <https://groups.google.com/a/ccadb.org/forum/?utm_source=digest&utm_medium=email#!forum/public/join> > . > To unsubscribe from this group and stop receiving emails from it send an > email to [email protected]. > -- ----------------------- Adrian MUELLER Tel: +41 79 502 53 45 -- You received this message because you are subscribed to the Google Groups "CCADB Public" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/ccadb.org/d/msgid/public/CAPO7BzBmcB6x423ioMwNq4Nn%3Dgh3PoVZkK__EQ%2Br9J7qROGz1A%40mail.gmail.com.
