Hi, The JSON array field is used, at least, for the first example - no CRLs. For the second one, the "Full CRL" field in the CCADB should be populated.
Feel free to follow up with additional questions. Ben On Mon, Mar 13, 2023 at 6:09 AM Adrian Mueller <[email protected]> wrote: > Dear Ben, > > Thank you for bringing up this topic. Concerning the sentence “*We have > previously instructed CAs that when there is no CRL, they should put an > empty JSON array in this field,* "[]" I have the following question > (please excuse my ignorance): > > To which case does the sentence refer to? > > 1. The CA does *not issue* a CRL *at all* (e.g. because it relies on > OCSP only or because it issues short-lived certificates for which no > revocation services are provided). > 2. The CA issues a full CRL only, *no partitioned* CRLs are issued and > therefore no array of partitioned CRLs is provided. > > Thanks in advance for your answer. > > > Best regards > > Adrian > > Adrian M. Mueller > > Product Manager Certificate Services > > > > +41 43 811 05 97 > > [email protected] > > Am Sa., 11. März 2023 um 05:40 Uhr schrieb <[email protected]>: > >> [email protected] >> <https://groups.google.com/a/ccadb.org/forum/?utm_source=digest&utm_medium=email#!forum/public/topics> >> Google >> Groups >> <https://groups.google.com/a/ccadb.org/forum/?utm_source=digest&utm_medium=email/#!overview> >> <https://groups.google.com/a/ccadb.org/forum/?utm_source=digest&utm_medium=email/#!overview> >> Topic digest >> View all topics >> <https://groups.google.com/a/ccadb.org/forum/?utm_source=digest&utm_medium=email#!forum/public/topics> >> >> - Empty JSON Array of Partitioned CRLs >> <#m_-1168315536955637031_m_6205175037828154458_group_thread_0> - 1 >> Update >> >> Empty JSON Array of Partitioned CRLs >> <http://groups.google.com/a/ccadb.org/group/public/t/e3b3aa38e405cdb2?utm_source=digest&utm_medium=email> >> Ben Wilson <[email protected]>: Mar 10 12:22PM -0700 >> >> All, >> The CCADB currently has a field titled, "JSON Array of Partitioned CRLs". >> We have previously instructed CAs that when there is no CRL, they should >> put an empty JSON array in this field, "[]". A problem has arisen when >> this field is populated via API. When this notation for an empty array is >> submitted to the CCADB via API, it is dropped. So, I'm wondering whether >> we >> should adopt some other, consistent notation that will work with the API >> and for everyone who might use the information from this field in the >> CCADB. (I don't like the idea of just leaving this field empty, because >> that is the default when no information has been provided by the CA.) >> Any advice is appreciated. >> Thanks, >> Ben >> Back to top <#m_-1168315536955637031_m_6205175037828154458_digest_top> >> You received this digest because you're subscribed to updates for this >> group. You can change your settings on the group membership page >> <https://groups.google.com/a/ccadb.org/forum/?utm_source=digest&utm_medium=email#!forum/public/join> >> . >> To unsubscribe from this group and stop receiving emails from it send an >> email to [email protected]. >> > > > -- > ----------------------- > Adrian MUELLER > > > Tel: +41 79 502 53 45 > > -- > You received this message because you are subscribed to the Google Groups > "CCADB Public" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/ccadb.org/d/msgid/public/CAPO7BzBmcB6x423ioMwNq4Nn%3Dgh3PoVZkK__EQ%2Br9J7qROGz1A%40mail.gmail.com > <https://groups.google.com/a/ccadb.org/d/msgid/public/CAPO7BzBmcB6x423ioMwNq4Nn%3Dgh3PoVZkK__EQ%2Br9J7qROGz1A%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "CCADB Public" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/ccadb.org/d/msgid/public/CA%2B1gtabkNOXqBKkMLH-WYtJL%3Di_vy%2BFatjofVkcok-mAneTZ8Q%40mail.gmail.com.
