3.3.5.2.2.2 Add Certificate Information

The certificate information element Cert in the namespace "urn:groove.net" MUST be created as a child of the security element "urn:groove.net:SE". The following attributes of the client certificate MUST be added to the certificate element:

  • EPKAlgo attribute is the encryption public key algorithm. It MUST be "DH" or "RSA".

  • EPubKey attribute is the encryption public key, encoded as defined in section 3.1.2.

  • EncAlgo attribute is the encryption algorithm. It MUST be "ELGAMAL" OR "RSA"

  • SPKAlgo attribute is the signature public key algorithm. It MUST be "RSA".

  • SPubKey attribute is the signature public key, DER encoded.

  • SigAlgo attribute is the signature algorithm. It MUST be "RSA".

If EPKAlgo is "DH", then ENCAlgo MUST be "ELGAMAL". If EPKAlgo is "RSA", then ENCAlgo MUST be "RSA".