Re: [TLS] Verifying X.509 Certificate Chains out of order

[Stefan Santesson <stefans at microsoft.com>]

Martin,

I'm not discussing the issue from the context of MS API. I was trying to answer a direct question.

The first certificate is the EE cert. the rest of the order does not matter for the verifier.


Stefan Santesson
Senior Program Manager
Windows Security, Standards


> -----Original Message-----
> From: Martin Rex [mailto:Martin.Rex at sap.com]
> Sent: den 7 oktober 2008 23:30
> To: Stefan Santesson
> Cc: simon at josefsson.org; tls at ietf.org
> Subject: Re: [TLS] Verifying X.509 Certificate Chains out of order
>
> Stefan Santesson wrote:
> >
> > On the original question:
> >
> > > It is claimed that OpenSSL, IE and Firefox does not enforce the
> second
> > > MUST in the paragraph above, and succeeds in verifying an
> > > out-of-sequence chain.  I haven't verified the claim.
> >
> > A Microsoft based SSL server will insert the certificates in order.
> > A Microsoft based SSL client doesn't require the certificates to be
> > in order. The client simply passes these certificates to the
> > CertGetCertificateChain API in the hAdditionalStore parameter.
> > This will validate the subject certificate regardless of order.
>
> I would appreciate if we could discuss the issue with terms of simple
> facts instead of in terms of a proprietary API.
>
> My familiarity with Microsoft CryptoAPI is close to zero,
> but a first glance suggests that you MUST explicitly provide
> an End Entity cert to CertGetCertificateChain(), parameter pCertContext.
>
> Either you have a hen-and-egg problem, or the certificate_list
> is not as unsorted as you claim it is.  How do you know which one
> is the End Entity cert without either relying that it is the first
> cert (as required by all existings TLS specs) or by first doing
> a manual search and applying heuristics (something that I seriously
> frown upon).
>
> -Martin

_______________________________________________
TLS mailing list
TLS at ietf.org
https://www.ietf.org/mailman/listinfo/tls