Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
The dwFlags field consists of a set of flags and values that MUST define the pctbRequest parameter BLOB and the expected content of the pctbCertChain parameter. This field MUST contain packed data specified as follows.
|
|
|
|
|
|
|
|
|
|
1 |
|
|
|
|
|
|
|
|
|
2 |
|
|
|
|
|
|
|
|
|
3 |
|
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
ExtendedFlags |
Flags |
RequestType |
Padding2 |
||||||||||||||||||||||||||||
ExtendedFlags: This bit-field defines extended options for the server’s request processing.
-
0
1
2
3
4
5
6
70
0
0
0
B
A
0
0
-
Where the bits are defined as follows:
-
Description
A
If this bit is set, the server MUST process the request as a new Certificate Transparency request, in accordance with section 3.2.1.4.2.1.4.3.1.
B
If this bit is set, the server MUST process the request as a new Pre-sign certificate request, in accordance with section 3.2.1.4.2.1.4.10.1.
Flags (1 byte): This bit-field MUST define options for the server's request processing and the response.
-
0
1
2
3
4
5
6
70
0
Z
0
X
Y
0
0
-
Where the bits are defined as follows:
-
Value
Description
X
If this bit is set, the response MUST include the CRLs for all the certificates returned in the pctbCertChain and pctbEncodedCert parameters.
Y
If this bit is set, then the response MUST be a CMC full PKI response. If it is not set, the response MUST be a CMS. This bit supported by the ICertRequestD2::Request2 method only.
Z
If this bit is set, this is a renewal request on behalf of another user. The processing rules for this type of request are specified in section 3.2.2.6.2.1.2.4.
RequestType (1 byte): RequestType MUST define the possible formats of the certificate request submitted in the pctbRequest parameter (format types are specified in [RFC2797]).
-
Value
Meaning
0x00
The client relies on CA to determine the request type. See section 3.2.1.4.2.1.4 for more details.
0x01
The request format MUST be a PKCS #10 request structure.
0x02
The request format MUST be a Netscape KEYGEN request structure.
0x03
The request format MUST be a CMS request structure.
0x04
The request format MUST be a Certificate Management Messages over a CMS (CMC) request structure.
0x05
The request format MUST be a response to the attestation CAChallenge.
0x06
The request format MUST be a SignedCertificateTimestampList structure.
Padding2 (1 byte): This field MUST be set to 0 and ignored upon receipt.