Thread: [Jsdsi-devel] AuthCertSelector
Status: Pre-Alpha
Brought to you by:
sajma
From: Sean R. <sra...@ae...> - 2004-12-07 17:15:35
|
Hi, Would it be valid to allow AuthCertSelector to have a null issuer so it would match all AuthCerts only on the Auth? Sean -- Dr. Sean Radford, MBBS, MSc sra...@ae... http://www.aegeus-technology.com/ |
From: Sameer A. <aj...@gm...> - 2004-12-07 17:54:51
|
Sure, but the Prover will never use that kind of query (it will always specify an issuer for AuthCertSelectors and NameCertSelectors). One of the benefits of always requiring the issuer is that it lets CertStores avoid keeping really long lists of certs that all share the same auth or same name. If you allow null issuer in AuthCertSelector, you ought to do the same for NameCertSelector. But is this kind of queyr really useful? I'd rather enforce non-null issuer if possible. Sameer On Tue, 07 Dec 2004 17:18:06 +0000, Sean Radford <sra...@ae...> wrote: > Hi, > > Would it be valid to allow AuthCertSelector to have a null issuer so it > would match all AuthCerts only on the Auth? > > Sean > > -- > Dr. Sean Radford, MBBS, MSc > sra...@ae... > http://www.aegeus-technology.com/ > > ------------------------------------------------------- > SF email is sponsored by - The IT Product Guide > Read honest & candid reviews on hundreds of IT Products from real users. > Discover which products truly live up to the hype. Start reading now. > http://productguide.itmanagersjournal.com/ > _______________________________________________ > Jsdsi-devel mailing list > Jsd...@li... > https://lists.sourceforge.net/lists/listinfo/jsdsi-devel > > -- Sameer Ajmani http://ajmani.net |
From: Sean R. <sra...@ae...> - 2004-12-07 18:52:52
|
Well I need it for an app I'm dealing with at present. I could extend CertSelector and make a 'new' AuthCertSelector within my own package that does what I need I guess. Sameer Ajmani wrote: >Sure, but the Prover will never use that kind of query (it will always >specify an issuer for AuthCertSelectors and NameCertSelectors). One >of the benefits of always requiring the issuer is that it lets >CertStores avoid keeping really long lists of certs that all share the >same auth or same name. > >If you allow null issuer in AuthCertSelector, you ought to do the same >for NameCertSelector. But is this kind of queyr really useful? I'd >rather enforce non-null issuer if possible. > >Sameer > >On Tue, 07 Dec 2004 17:18:06 +0000, Sean Radford ><sra...@ae...> wrote: > > >>Hi, >> >>Would it be valid to allow AuthCertSelector to have a null issuer so it >>would match all AuthCerts only on the Auth? >> >>Sean >> >>-- >>Dr. Sean Radford, MBBS, MSc >>sra...@ae... >>http://www.aegeus-technology.com/ >> >>------------------------------------------------------- >>SF email is sponsored by - The IT Product Guide >>Read honest & candid reviews on hundreds of IT Products from real users. >>Discover which products truly live up to the hype. Start reading now. >>http://productguide.itmanagersjournal.com/ >>_______________________________________________ >>Jsdsi-devel mailing list >>Jsd...@li... >>https://lists.sourceforge.net/lists/listinfo/jsdsi-devel >> >> >> >> > > > > -- Dr. Sean Radford, MBBS, MSc sra...@ae... http://www.aegeus-technology.com/ |
From: Sameer A. <aj...@gm...> - 2004-12-07 22:03:36
|
You might just add a new one, "AuthOnlyCertSelector." Ideally, we'd retroactively name the old one "IssuerAuthCertSelector" and call yours "AuthCertSelector", but I'd lke to keep the API stable. Sameer On Tue, 07 Dec 2004 18:55:27 +0000, Sean Radford <sra...@ae...> wrote: > Well I need it for an app I'm dealing with at present. I could extend > CertSelector and make a 'new' AuthCertSelector within my own package > that does what I need I guess. > > > > > Sameer Ajmani wrote: > > >Sure, but the Prover will never use that kind of query (it will always > >specify an issuer for AuthCertSelectors and NameCertSelectors). One > >of the benefits of always requiring the issuer is that it lets > >CertStores avoid keeping really long lists of certs that all share the > >same auth or same name. > > > >If you allow null issuer in AuthCertSelector, you ought to do the same > >for NameCertSelector. But is this kind of queyr really useful? I'd > >rather enforce non-null issuer if possible. > > > >Sameer > > > >On Tue, 07 Dec 2004 17:18:06 +0000, Sean Radford > ><sra...@ae...> wrote: > > > > > >>Hi, > >> > >>Would it be valid to allow AuthCertSelector to have a null issuer so it > >>would match all AuthCerts only on the Auth? > >> > >>Sean > >> > >>-- > >>Dr. Sean Radford, MBBS, MSc > >>sra...@ae... > >>http://www.aegeus-technology.com/ > >> > >>------------------------------------------------------- > >>SF email is sponsored by - The IT Product Guide > >>Read honest & candid reviews on hundreds of IT Products from real users. > >>Discover which products truly live up to the hype. Start reading now. > >>http://productguide.itmanagersjournal.com/ > >>_______________________________________________ > >>Jsdsi-devel mailing list > >>Jsd...@li... > >>https://lists.sourceforge.net/lists/listinfo/jsdsi-devel > >> > >> > >> > >> > > > > > > > > > > -- > Dr. Sean Radford, MBBS, MSc > sra...@ae... > http://www.aegeus-technology.com/ > > -- Sameer Ajmani http://ajmani.net |