aarongable / draft-acme-ari

Internet Draft for the Automated Certificate Management Environment (ACME) Renewal Information (ARI) Extension
Other
3 stars 7 forks source link

signatureAlgorithm should be hashAlgorithm? #30

Closed osirisinferi closed 2 years ago

osirisinferi commented 2 years ago

line 103 currently states:

(…) a DER-encoded CertID ASN.1 sequence [@!RFC6960, section 4.1.1].

Looking at the CertID structure in RFC6960, section 4.1.1, it states:

CertID ::= SEQUENCE { hashAlgorithm AlgorithmIdentifier, issuerNameHash OCTET STRING, -- Hash of issuer's DN issuerKeyHash OCTET STRING, -- Hash of issuer's public key serialNumber CertificateSerialNumber }

However, line 114 of the draft states:

(…) if it receives a request whose embedded signatureAlgorithm field contains an unacceptable OID (…)

The signatureAlgorithm is part of the "Signature" sequence of RFC 6960, which doesn't seem to be used in this draft.