Hi Crypt32, the updated specification has the fix for this issue. Please review the latest version from the following location and let us know if you have any follow up questions.
Regards,
Sreekanth Nadendla-MSFT
This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Documentation says:
If the CA signing certificate that is stored in the Signing_Cert_Certificate column is a root certificate, the CA MUST return 0x00000003. Otherwise, the CA MUST return 0x00000004.
it is incomplete, because it doesn't include Enterprise CA scenario which is defined in CAINFO structure ([MS-WCCE] §2.2.2.3). Proper description would be:
If the CA signing certificate that is stored in the Signing_Cert_Certificate column is a root certificate, the CA MUST return 0x00000000 or 0x00000003. Otherwise, the CA MUST return 0x00000001 or 0x00000004.
Hi Crypt32, the updated specification has the fix for this issue. Please review the latest version from the following location and let us know if you have any follow up questions.
Regards,
Sreekanth Nadendla-MSFT
Hi Crypt32, I am working with our team to get this issue fixed in our specification.
Regards,
Sreekanth Nadendla-MSFT