Re: Test cases 4.14.31-35

["David A. Cooper" <david.cooper@nist.gov>]

Sean Mullan wrote:

> The indirectCRLCA5CRL CRL in these test cases has an encoding problem. 
> In the CRL's IssuingDistributionPoint ext, the indirectCRL flag is set 
> to false. I think it should be true, and this is also what it states 
> in section 6.1.5.517.

Sean,

I believe that you are misreading the contents of the certificate.  I am 
looking at indirectCRLCA5CRL.crl and it includes a critical 
issuingDistributionPoint extension where tag [4] is present and has a 
value of FF.  According to X.690, a boolean value is BER encoded as a 
single octet with zero representing FALSE and any non-zero value 
representing TRUE.  For DER, TRUE must be encoded as an octet with all 
eight bits set to one (i.e., FF).

Are you seeing something different?

Dave