Re: [TLS] Verifying X.509 Certificate Chains out of order

[Eric Rescorla <ekr at networkresonance.com>]

At Tue, 07 Oct 2008 16:38:19 +0200,
Peter Sylvester wrote:
> 
> [1  <multipart/signed (7bit)>]
> [1.1  <text/plain; ISO-8859-1 (7bit)>]
> I am not sure that the following structure is properly defined:
> 
> 
> Structure of this message:
> 
>       opaque ASN.1Cert<1..2^24-1>;
> 
>       struct {
>           ASN.1Cert certificate_list<0..2^24-1>;
>       } Certificate;
> 
>    certificate_list
>       This is a sequence (chain) of certificates. 
> 
> A little bit later: 
> 
> Also, PKCS #7 defines a SET rather than a SEQUENCE, making the task
>    of parsing the list more difficult. 
> 
> Still, there is no thing that indicates D|B|XER encoding of
> something like  SEQUENCE OF Certificate" 

I don't think I understand the question: this isn't any kind of 
ASN.1 structure. It's a TLS vector DER-encoded certs. 
I.e.

24-bit length field = Y
   24-bit length field = X  \ cert 1
   encoded cert (length X)  /
   24-bit length field = W  \ cert 2
   encoded cert (length W)  /

-Ekr

_______________________________________________
TLS mailing list
TLS at ietf.org
https://www.ietf.org/mailman/listinfo/tls