ePassport Certificate API Methods
Last updated
Last updated
Distribution of CV Certificates
The following messages are used for the management of CV certificates at a national level.
This message is used by a DV or by a terminal for requesting the generation of a new certificate for one of its keys from the national CVCA or the DV, respectively.
Input parameters
* - Mandatory parameter, C - Conditional
certReq: It is necessary to use the Certificate Request Structure and follow the encoding specifications for Machine Readable Travel Documents.
Output parameters
* - Mandatory parameter, C - Conditional
Return Codes
This message is used by a DV to initiate the request for a new certificate for one of its keys from a CVCA in another country. This message is not sent to the foreign CVCA which is intended to generate the certificate, instead, it is sent to the national SPOC of the country of the DV. This national SPOC verifies the request of the DV according to national regulations. If the request meets the national regulations it is forwarded to the SPOC of the other country.
Input parameters
* - Mandatory parameter, C - Conditional
certReq: It MUST be constructed according to the Certificate Request Structure. The coding must follow the specifications in Encoding of Values. (Reference: Machine Readable Travel Documents)
Output parameters
* - Mandatory parameter, C - Conditional
Return Codes
This message is sent by a DV or by a terminal to a CVCA or to a DV, respectively, in order to get all relevant CA certificates of the national CVCA or foreign CVCAs. In this sense, a CA certificate is regarded as relevant if it is still valid and if it is needed for the verification of a (valid) certificate of the DV (generated by the CVCA).
Input parameters
* - Mandatory parameter, C - Conditional
Output parameters
* - Mandatory parameter, C - Conditional
Return Codes
Remarks:
If the message is processed successfully and accepted the CVCA MUST send all relevant CA certificates (see above) within the response, either in the output parameter certificateSeq(synchronous processing) or in the corresponding response message SendCertificates(asynchronous processing).
If a certification authority or a SPOC processes one of the messages RequestCertificate, RequestForeignCertificate or GetCACertificates asynchronously, it uses a response message SendCertificates to communicate the result of its processing. It sends the response message always to that URL which is contained in the parameter responseURL of the received message.
This message can also be used to notify registered entities about the availability of new certificates. In this case the messageID must be omitted.
This message itself must always be processed synchronously by its receiver.
Input parameters
* - Mandatory parameter, C - Conditional
Output parameters
None.
Return Codes
The following messages are used for the distribution of Document Signer Lists.
This message is sent by a terminal to its DV in order to get one or more signed lists of document signers.
Input, Output and Return Codes parameters for message GetDocumentSignerList
Input parameters
* - Mandatory parameter, C - Conditional
Output parameters
* - Mandatory parameter, C - Conditional
Return Codes