It refers to case 2. It also refers to the case where the Subordinate CA exists and therefore has an entry in CCADB, but has never issued any certificates, and therefore is not yet required to populate the CRL fields: "...SHALL populate the CCADB fields... within 7 days of such intermediate CA issuing its first certificate" (MRSP, Section 4.1).
On Mon, Mar 13, 2023 at 5:07 AM Adrian Müller <[email protected]> wrote: > Dear Ben, > > > > Thank you for bringing up this topic. Concerning the sentence “*We have > previously instructed CAs that when there is no CRL, they should put an > empty JSON array in this field,* "[]" I have the following question > (please excuse my ignorance): > > To which case does the above mentioned sentence refer to? > > 1. The CA does *not issue* a CRL *at all* (e.g. because it relies on > OCSP only or because it issues short-lived certificates for which no > revocation services are provided). > 2. The CA issues a full CRL only, *no partitioned* CRLs are issued and > therefore no array of partitioned CRLs is provided. > > Thanks in advance for your answer. > > > Best regards > > Adrian > > > Adrian M. Mueller > > Product Manager Certificate Services > > > > +41 43 811 05 97 > > [email protected] > > > > > Ben Wilson schrieb am Freitag, 10. März 2023 um 20:22:27 UTC+1: > >> All, >> The CCADB currently has a field titled, "JSON Array of Partitioned CRLs". >> We have previously instructed CAs that when there is no CRL, they should >> put an empty JSON array in this field, "[]". A problem has arisen when >> this field is populated via API. When this notation for an empty array is >> submitted to the CCADB via API, it is dropped. So, I'm wondering whether we >> should adopt some other, consistent notation that will work with the API >> and for everyone who might use the information from this field in the >> CCADB. (I don't like the idea of just leaving this field empty, because >> that is the default when no information has been provided by the CA.) >> Any advice is appreciated. >> Thanks, >> Ben >> > -- > You received this message because you are subscribed to the Google Groups > "CCADB Public" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/ccadb.org/d/msgid/public/8bcf98c4-f8f8-4a35-a994-d83291d941e9n%40ccadb.org > <https://groups.google.com/a/ccadb.org/d/msgid/public/8bcf98c4-f8f8-4a35-a994-d83291d941e9n%40ccadb.org?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "CCADB Public" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/ccadb.org/d/msgid/public/CAEmnErdDgG2jGyWY5d2W1gDj8-N%2B3qarG%2BW2oyJtjNaDYOrvNg%40mail.gmail.com.
