Re: [TLS] Verifying X.509 Certificate Chains out of order

[Peter Sylvester <Peter.Sylvester at edelweb.fr>]

I am not sure that the following structure is properly defined:


Structure of this message:

     opaque ASN.1Cert<1..2^24-1>;

     struct {
         ASN.1Cert certificate_list<0..2^24-1>;
     } Certificate;

  certificate_list
     This is a sequence (chain) of certificates. 

A little bit later: 

Also, PKCS #7 defines a SET rather than a SEQUENCE, making the task
  of parsing the list more difficult. 

Still, there is no thing that indicates D|B|XER encoding of
something like  SEQUENCE OF Certificate"

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
TLS mailing list
TLS at ietf.org
https://www.ietf.org/mailman/listinfo/tls