[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: some concerns about last IKEv2 draft
On Thu, Sep 11, 2003 at 03:21:23PM +0200, Francis Dupont wrote:
> While type-specific tagging might make life easier for the parser, it
> is not strictly necessary since it is possible to distinguish between
> certificates and CRL's by the ebedded ASN.1 type information.
>
> => I disagree: certificates and CRLs are SEQUENCEs so tagging is mandatory
> (cf ITU-T REC X.680 200207 aka ISO/IEC IS 8824-1 2003, 28.3:
> "The Types defined in the "AlternativeTypeList" productions in an
> "AlternativeTypeLists" shall have distinct tags")
Specifically they are SEQUENCEs that are either both not tagged or are
not tagged with different tags.
"CHOICE { foo, bar }" is ok, provided that foo and bar have distinct
outer tags.
Cheers,
Nico
--