Re: Test cases 4.14.31-35

[Sean Mullan <Sean.Mullan@Sun.COM>]

I looked into this and I think the problem is a decoding problem in our 
code. Sorry about that.

Thanks,
Sean

David A. Cooper wrote:
> Sean Mullan wrote:
> 
>> The indirectCRLCA5CRL CRL in these test cases has an encoding problem. 
>> In the CRL's IssuingDistributionPoint ext, the indirectCRL flag is set 
>> to false. I think it should be true, and this is also what it states 
>> in section 6.1.5.517.
> 
> 
> Sean,
> 
> I believe that you are misreading the contents of the certificate.  I am 
> looking at indirectCRLCA5CRL.crl and it includes a critical 
> issuingDistributionPoint extension where tag [4] is present and has a 
> value of FF.  According to X.690, a boolean value is BER encoded as a 
> single octet with zero representing FALSE and any non-zero value 
> representing TRUE.  For DER, TRUE must be encoded as an octet with all 
> eight bits set to one (i.e., FF).
> 
> Are you seeing something different?
> 
> Dave
>