Re: certification path validation suite

2003-01-28 Thread Michael Helm
Dr. Stephen Henson writes: There are many certs in production use with policy extensions; the VeriSign end entity certs should provide many examples. Yes I know about those. Is there any documentation however on what the VeriSign policy extensions actually *mean*. The last time I looked

Re: certification path validation suite

2003-01-27 Thread Michael Helm
Dr. Stephen Henson writes: 3. If there is no reference test suite available, should it be assumed that there exists no tested, and, therefore with high probability no correct, implementation of the certification path validation algorithm which handles the policy mappings and name

Re: certification path validation suite

2003-01-27 Thread Dr. Stephen Henson
On Mon, Jan 27, 2003, Michael Helm wrote: There are many certs in production use with policy extensions; the VeriSign end entity certs should provide many examples. Yes I know about those. Is there any documentation however on what the VeriSign policy extensions actually *mean*. The last

certification path validation suite

2003-01-23 Thread Thomas Pornin
Hello, I send that message to the openssl-dev list because the same problem is likely to have occurred or to occur in a near future to openssl developpers. I am currently developping an implementation of the certification path validation algorithm described in section 6.1 of RFC 3280. I need

Re: certification path validation suite

2003-01-23 Thread Kiyoshi WATANABE
Dear Thomas, The consortium that I am currently in have some test suites for policy mapping, or more specifically cross certification situation. But I am not sure how much our test suites are suitable for your needs. Now we evaluate the test suites using several implementations. There will be

Re: certification path validation suite

2003-01-23 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Thu, 23 Jan 2003 18:16:31 +0100, Thomas Pornin [EMAIL PROTECTED] said: pornin 2. I heard the NIST is preparing an advanced test suite which porninmight be of some help; is there any info about when this pornintest suite will be ready ? I believe that the

Re: certification path validation suite

2003-01-23 Thread Dr. Stephen Henson
On Thu, Jan 23, 2003, Thomas Pornin wrote: Hello, 3. If there is no reference test suite available, should it be assumed that there exists no tested, and, therefore with high probability no correct, implementation of the certification path validation algorithm which handles the policy