Subject: [pkix] [Errata Verified] RFC4210 (3949)

From: RFC Errata System <[email-masked]>
Date: Tue, 31 Mar 2015 13:50:35 -0700 (PDT)

The following errata report has been verified for RFC4210,
"Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)". 

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=4210&eid=3949

--------------------------------------
Status: Verified
Type: Editorial

Reported by: Tom Biskupic <[email-masked]>
Date Reported: 2014-04-02
Verified by: Kathleen Moriarty (IESG)

Section: 5.3.4

Original Text
-------------
CertRepMessage ::= SEQUENCE {
         caPubs          [1] SEQUENCE SIZE (1..MAX) OF Certificate
                             OPTIONAL,
         response            SEQUENCE OF CertResponse
     }

Corrected Text
--------------
CertRepMessage ::= SEQUENCE {
         caPubs       [1] SEQUENCE SIZE (1..MAX) OF CMPCertificate
                          OPTIONAL,
         response         SEQUENCE OF CertResponse
     }

Notes
-----
The definition in the text is different to the one in the ASN.1 module contained in Appendix F. The correct text is assumed to be the one from Appendix F

CMPCertificate is a superset of Certificate which has one element.  The new structure would allow for a new certificate type to be included.  Not sure that it would ever happen.

--------------------------------------
RFC4210 (draft-ietf-pkix-rfc2510bis-09)
--------------------------------------
Title               : Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)
Publication Date    : September 2005
Author(s)           : C. Adams, S. Farrell, T. Kause, T. Mononen
Category            : PROPOSED STANDARD
Source              : Public-Key Infrastructure (X.509)
Area                : Security
Stream              : IETF
Verifying Party     : IESG