Re: [TLS] Verifying X.509 Certificate Chains out of order

[Peter Sylvester <Peter.Sylvester at edelweb.fr>]

> I don't think I understand the question: this isn't any kind of 
> ASN.1 structure. It's a TLS vector DER-encoded certs. 
> I.e.
>   
ouups; right.

Is ASN.1Cert defined in the text.
It does not says that you have a DER encoded cert.
It could be BER, CER, DER, at least partially. But
not XER and not PEM.

Anyway, no big deal.
> 24-bit length field = Y
>    24-bit length field = X  \ cert 1
>    encoded cert (length X)  /
>    24-bit length field = W  \ cert 2
>    encoded cert (length W)  /
>
> -Ekr
>
>
>   


--

<http://www.edelweb.fr>
*Edel/W/eb* 	Peter SYLVESTER
Consultant Sécurité des Systèmes d'Information
-----------------------------------------------------------
EdelWeb - Groupe ON-X
15, quai de Dion-Bouton
F-92816 Puteaux Cedex
Tel : +33.1.40.99.14.14 / Fax : +33.1.40.99.99.58
www.edelweb.fr <http://www.edelweb.fr> / www.on-x.com <http://www.on-x.com>
-----------------------------------------------------------
To verify the message signature, see edelpki.edelweb.fr 
<http://edelpki.edelweb.fr/>
Cela vous permet de charger le certificat de l'autorité de racine 
<http://edelpki.edelweb.fr/cacerts/EdelPKI-ca.der>;
die Liste mit zurückgerufenen Zertifikaten finden Sie da auch.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
TLS mailing list
TLS at ietf.org
https://www.ietf.org/mailman/listinfo/tls