[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: some concerns about last IKEv2 draft



On Thu, Sep 11, 2003 at 03:21:23PM +0200, Francis Dupont wrote:
>    While type-specific tagging might make life easier for the parser, it
>    is not strictly necessary since it is possible to distinguish between
>    certificates and CRL's by the ebedded ASN.1 type information.
>    
> => I disagree: certificates and CRLs are SEQUENCEs so tagging is mandatory
> (cf ITU-T REC X.680 200207 aka ISO/IEC IS 8824-1 2003, 28.3:
> "The Types defined in the "AlternativeTypeList" productions in an
>  "AlternativeTypeLists" shall have distinct tags")

Specifically they are SEQUENCEs that are either both not tagged or are
not tagged with different tags.

"CHOICE { foo, bar }" is ok, provided that foo and bar have distinct
outer tags.

Cheers,

Nico
--