Internet X.509 Public Key Infrastructure Operational Protocols: Certificate Store Access via HTTP

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 25
Abstract: The protocol conventions described in this document satisfy some of the operational requirements of the Internet Public Key Infrastructure (PKI). This document specifies the conventions for using the Hypertext Transfer Protocol (HTTP/HTTPS) as an interface mechanism to obtain certificates and certificate revocation lists (CRLs) from PKI repositories. Additional mechanisms addressing PKIX operational requirements are specified in separate documents. [STANDARDS-TRACK]
Publication Date: 2006-02-01
Status Note: Proposed Standard
DOI: 10.17487/RFC4387
Link: https://doi.org/10.17487/RFC4387
Author(s): Peter Gutmann
Keyword(s): PKI, HTTP

Latest version of IETF RFC 4387

Document Versions — IETF RFC 4387

▶ IETF RFC 4387 (2006-02-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Amended by:

IETF RFC 8553 [Active*]

Normative Reference(s)

NIST FIPS 180-1 [Withdrawn]
IETF RFC 2119 [Active*]
IETF RFC 2440 [Superseded*]
IETF RFC 2585 [Active*]
IETF RFC 2616 [Superseded*]
IETF RFC 2782 [Active*]
IETF RFC 2854 [Active*]
IETF RFC 3156 [Active*]
IETF RFC 3275 [Active*]
IETF RFC 3280 [Superseded*]
IETF RFC 3852 [Superseded*]

Bibliographic Reference(s)

"Affinity-based Management of Main Memory Database Clusters", Minwen Ji, ACM Transactions on Internet Technology, Vol.2, No.4 (November 2002), p.307. EXTERNAL
"PRO-COW: Protocol Compliance on the Web - A Longitudinal Survey", Balachander Krishnamurthy and Martin Arlitt, Proceedings of the 3rd Usenix Symposium on Internet Technologies and Systems (USITS'01), March 2001, p.109. EXTERNAL
"A PGP Public Key Server", Marc Horowitz, 2000, http://www.mit.edu/afs/net.mit.edu/project/pks/ thesis/paper/thesis.html . A more complete and up- to-date overview of HKP may be obtained from the source code of an open-source OpenPGP implementation such as GPG. EXTERNAL
"Network Performance Effects of HTTP/1.1, CSS1, and PNG", H.Nielsen, J.Gettys, A.Baird-Smith, E.Prud'hommeaux, H.Wium Lie, and C.Lilley, 24 June 1997, http://www.w3.org/Protocols/HTTP/ Performance/Pipeline.html EXTERNAL
"Universal Plug and Play Device Architecture, Version 1.0", UPnP Forum, 8 June 2000. EXTERNAL
"A Reliable, Scalable General-purpose Certificate Store", P. Gutmann, Proceedings of the 16th Annual Computer Security Applications Conference, December 2000. EXTERNAL
"Special Ops: Host and Network Security for Microsoft, Unix, and Oracle", Erik Birkholz et al, Syngress Publishing, November 2002. EXTERNAL
"Main Memory Database Systems", Hector Garcia-Molina and Kenneth Salem, IEEE Transactions on Knowledge and Data Engineering, Vol.4, No.6 (December 1992), p.509. EXTERNAL
"Performance Interactions Between P-HTTP and TCP Implementations", J. Heidemann, ACM Computer Communications Review, April 1997. EXTERNAL
"Analysis of HTTP Performance Problems", S.Spero, July 1994, http://www.w3.org/Protocols/HTTP/1.0/ HTTPPerformance.html . EXTERNAL
IETF RFC 3205 [Superseded*]
IETF RFC 3390 [Active*]
IETF RFC 3875 [Active*]
RSA.PKCS11.v2.10.1999 — PKCS11 EXTERNAL
RSA.PKCS15.v1.1.2000 — 18 EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC4387.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 4387, Internet X.509 Public Key Infrastructure Operational Protocols: Certificate Store Access via HTTP. Available at https://doi.org/10.17487/RFC4387

Snippet:

IETF RFC 4387, Internet X.509 Public Key Infrastructure Operational Protocols: Certificate Store Access via HTTP. Available at https://doi.org/10.17487/RFC4387

HTML (ISO 690 compliant)

Preview:

IETF RFC 4387, Internet X.509 Public Key Infrastructure Operational Protocols: Certificate Store Access via HTTP. Available at https://doi.org/10.17487/RFC4387

Snippet:

<span class="citation"><cite>IETF RFC 4387</cite>, Internet X.509 Public Key Infrastructure Operational Protocols: Certificate Store Access via HTTP. Available at <a href="https://doi.org/10.17487/RFC4387" target="_blank" rel="noopener">https://doi.org/10.17487/RFC4387</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 4387, Internet X.509 Public Key Infrastructure Operational Protocols: Certificate Store Access via HTTP
doi: 10.17487/RFC4387
url: https://doi.org/10.17487/RFC4387

Snippet:

<li>
<cite id="bib-rfc4387">IETF RFC 4387</cite>, Internet X.509 Public Key Infrastructure Operational Protocols: Certificate Store Access via HTTP
<span class="doi">10.17487/RFC4387</span>
</li>

Referenced By

IETF RFC 8553 [Active*]