kmip-interop-tech — archive

[Mathias Bjorkqvist]

All,


Here are my summary notes from today's interop call. Please let me know
of any additions/corrections you might have.


Regards,

Mathias



KMIP interop 2010-12-09
Attending: Mathias, Alan, Tim, Bruce

Mathias collecting comments and questions
from discussions on the interop calls and email exchanges into spreadsheet
so that they can be addressed in the same way as the public review comments
earlier this year. Will send out a first draft version ASAP for corrections
and additions.

Discussion on Template based on last
week's discussion and Tim's email this week. One option is return only
attributes belonging to the template itself in the Template object in the
Get response, whereas Get Attributes would only return attributes that
are to be applied to objects created from the Template. However, then you
might perform an Add Attribute followed by a Get Attribute to retrieve
the attribute that was added but have nothing returned. You could also
treat the template's own attributes as "key material" and not
allow them to be modified (you would have to register a new template).
The Cryptsoft server currently treats also key material as attributes,
so you could Modify Attribute on the key material. Not clear in the spec
which are the attribute name text strings that are allowed to be used (intended
meaning is only the 32 listed as subsection titles in Section 3). Is a
State attribute in a Template applied to objects created from it? List
in 2.2.6 says State cannot be set in the Template. Need to make it more
explicit - attributes omitted are forbidden. What is returned for Get Attribute
List and Get Attributes(State) for a Template?