kmip-interop-tech — archive

[Mathias Bjorkqvist]

All, The IBM KMIP interop server has been updated. The aim was to address the following issues that surfaced during recent interop testing: v1.1: -An "Owner" attribute returned in Get Attribute List responses (attribute removed from list) (3.1.4 step 3, 4.1 step 8, 13.2 step 4, 13.4 step 5) -The Attribute Index from a deleted attribute was omitted in Delete Attribute response (index added) (3.1.4 step 7) -The Server Information structure was incorrectly returned in Query responses even though it was not requested (not returned now) (12.2 step 0, 12.2 step 1) -The value of the "Cryptographic Length" attribute for X.509 certificates was returning the length of the encoded certificate (changed to indicate the length (in bits) of the public key contained within the certificate) (13.2 step 5, 13.4 step 6) -The new Certificate Length attribute was not included in Get Attribute List for X.509 certificates (added, the attribute can also be retrieved using Get Attributes) (13.2 step 4, 13.4 step 5) -The v1.1 Device Credential used the SERIAL_NUMBER tag (deprecated for certificates, the Device Credential uses the new DEVICE_SERIAL_NUMBER tag) (11.2) v1.0: -Delete Attribute requests where the attribute index of 0 was not specified were incorrectly rejected for attributes which do not have multiple instances (allowed) (3.1.4 step 7) The following items are still pending: v1.1: -"Get Attribute List" does not return the new X.509 Certificate attributes since the attributes are not (yet) retrievable using Get Attributes If you have the time, please rerun your clients and let me know if you spot any issues (new or old)! Thanks, Mathias