View Issue Details

IDProjectCategoryView StatusLast Update
000578510000-012: DiscoverySpecpublic2020-09-14 17:12
ReporterMartin Regen Assigned ToRandy Armstrong  
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Summary0005785: A validity time or nextUpdate parameter should be returned by the proposed CheckRevocationStatus method.
Description

In order to optimize network traffic and reduce the amount of checks that need to be done by a client or server to validate an application certificate signed by a CA, it would be beneficial to return a response with a validity period or the next Update time.
So the client/server can reduce the number of checks to a new certificate and cache the response until the next update is due.
The validity time response may also be 'unknown' for cases where an proper validity time can not be determined, this case should be specificed (e.g. DateTime.MinValue),
The update time would also allow for the implementation option to offload the validity checks to a time which is not so critical compared to the check during the session connection.

For the OCSP protocol and for CRL there is information included to calculate the value (RFC6960):

The thisUpdate and nextUpdate fields define a recommended validity
interval. This interval corresponds to the {thisUpdate, nextUpdate}
interval in CRLs. Responses whose nextUpdate value is earlier than
the local system time value SHOULD be considered unreliable.
Responses whose thisUpdate time is later than the local system time
SHOULD be considered unreliable.

Additional Information

https://tools.ietf.org/html/rfc6960#section-4.2.2.1

TagsNo tags attached.
Commit Version
Fix Due Date

Activities

Randy Armstrong

2020-09-13 16:43

administrator   ~0012790

Added validityTime output parameter.

Jim Luth

2020-09-14 17:12

administrator   ~0012802

Agreed to changes edited in virtual F2F.

Issue History

Date Modified Username Field Change
2020-07-07 06:33 Martin Regen New Issue
2020-07-07 06:33 Martin Regen Status new => assigned
2020-07-07 06:33 Martin Regen Assigned To => Randy Armstrong
2020-09-13 16:43 Randy Armstrong Status assigned => resolved
2020-09-13 16:43 Randy Armstrong Resolution open => fixed
2020-09-13 16:43 Randy Armstrong Note Added: 0012790
2020-09-14 17:12 Jim Luth Status resolved => closed
2020-09-14 17:12 Jim Luth Fixed in Version => 1.05
2020-09-14 17:12 Jim Luth Note Added: 0012802