none
[MS-WCCE] ICertRequestD2::GetCAProperty (Opnum 7) incorrect data in table RRS feed

  • Question

  • In [MS-WCCE] §3.2.1.4.3.2, last table has multiple issues in "PropIndex MUST be" column for the various PropIDs. So, let's go:

    • PropID = 0x12
    • PropID = 0x1f
    • PropID = 0x20
    • PropID = 0x2b

    Current value: "The minimum index is 0. The maximum index is one less than the count of rows in the Signing_Cert table."

    Expected value: "The minimum index is 0. The maximum index is one less than the count of rows in the Signing_Cert table. An index of 0xFFFFFFFF is allowed and indicates the maximum valid index."


    • PropID = 0x13
    • PropID = 0x14
    • PropID = 0x27

    Current value: "ANY"

    Expected value: "The minimum index is 0. The maximum index is one less than the count of rows in the Signing_Cert table."


    • PropID = 0x1b

    Current value: "ANY"

    Expected value: "The minimum index is 0. The maximum index is one less than value of the Config_CA_KRA_Cert_Count datum."


    • PropID = 0x25

    Current value: "ANY"

    Expected value: "The index corresponds to a particular CA signing certificate. Since the last CA signing certificate cannot have a forward cross certificate, the minimum index is 0 and the maximum index is two less than the count of rows in the Signing_Cert table."


    • PropID = 0x26

    Current value: "ANY"

    Expected value: "The index corresponds to a particular CA signing certificate. Since the first CA signing certificate cannot have a backward cross certificate, the minimum index is 1 and the maximum index is one less than the count of rows in the Signing_Cert table."


    If you feel that these are very different issues, I can split them into separate threads.


    Vadims Podāns, aka Crypt32
    My weblog: www.sysadmins.lv
    PowerShell PKI Module: PSPKI
    Check out new: SSL Certificate Verifier
    Check out new: ASN.1 Editor tool.

    Monday, June 8, 2020 1:56 PM

All replies