|
From: Bob K. <py...@ce...> - 2004-01-07 01:32:15
|
Dear Peter, Your presumption exactly what I implemented, sorry that I didn't mention it clearly. Regards, Bob Koon Mayne, Peter wrote: > From: Bob Koon > > 3) It will be hard to decide the behaviour if both CertResolver and > Trust store is set, since there may be case > > that the cert cannot be gotten from the key info of the message. > > This is the case with messages we receive: the certificate is not > included in the KeyInfo. > > > The current implementation is that the CertResolver is used to > verify the signature, and then the trust store > > is used to verify the cert path of the certificate from the > CertResolver. > > I presume you mean "the certificate returned by the CertResolver is > used to verify the signature". > > Why are you verifying the path of the certificate from CertResolver? > If my CertResolver is returning a certificate, then presumably that > certificate doesn't need to be further verified against the trust > store. I presume it's because by the time path is verified, you don't > know (or care) if the certificate came from the message or the > CertResolver, which is fine. > > PJDM > -- > Peter Mayne > Technology Consultant > Spherion Technology Solutions > Level 1, 243 Northbourne Avenue, Lyneham, ACT, 2602 > T: 61 2 62689727 F: 61 2 62689777 > >The information contained in this email and any attachments to it: > >(a) may be confidential and if you are not the intended recipient, any interference with, >use, disclosure or copying of this material is unauthorised and prohibited; and > >(b) may contain personal information of the recipient and/or the sender as defined >under the Privacy Act 1988 (Cth). Consent is hereby given by the recipient(s) to >collect, hold and use such information and any personal information contained in a >response to this email, for any reasonable purpose in the ordinary course of >Spherion's >business, including forwarding this email internally or disclosing it to a third party. All >personal information collected by Spherion will be handled in accordance with >Spherion's Privacy Policy. If you have received this email in error, please notify the >sender and delete it. > >(c) you agree not to employ or arrange employment for any candidate(s) supplied in >this email and any attachments without first entering into a contractual agreement with >Spherion. You further agree not to divulge any information contained in this document >to any person(s) or entities without the express permission of Spherion. > > > > |