drm中跟digital certificate有关的字段3-优快云博客

本文链接：https://blog.youkuaiyun.com/miaouu/article/details/6046093

本文详细阐述了在特定协议中，客户端与域交互时发送请求和响应的具体规范，包括证书链、OCSP响应等关键参数的使用条件及要求。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

Domain

1、"Certificate Chain" in DomainRequest
"is sent unless Certificate Caching is indicated in the RI Context with this RI".

2、"Peer Key Identifier" in Join Join DomainRequest
MUST send "if, and only if, it has stored the RI pk corresponding to the stored RI ID as specified in 5.4.2.4.1".

3、"No OCSP Response" in Join Join DomainRequest
MUST send "if, and only if, it has a complete set of valid OCSP responses for the RI’s certificate chain".

4、"OCSP Responder Key Identifier" in Join DomainRequest
MUST send "if, and only if, it has stored an OCSP Responder key for this RI".

5、"Hash Chain Support" in Join DomainRequest
"it signals that the client supports a technique of generating Domain Keys through hash chains".
MUST send "if, and only if, it supports hash-chained Domain keys".

6、"Certificate Chain" in JoinDomainResponse
"MUST be present unless" 2 present.

7、"OCSP Response" in JoinDomainResponse
"SHALL be a complete set of valid OCSP responses for the RI's certificate chain".
"will not be sent if" 3 present.

8、"Hash Chain Support" in JoinDomainResponse
      "indicates that the RI is using the technique of generating Domain Keys through hash chains".
      "The RI MUST NOT include this extension" unless 5 present.
      "If the Device receives Hash Chains Support extension then it needs only store the latest Domain Key for a given Domain".

RoUpload

9、"Certificate Chain" in RoUploadRequest
"This parameter is sent unless Certificate Caching is indicated in the RI Context with this RI".

10、"Peer Key Identifier" in RoUploadRequest
same to 2

11、"No OCSP Response" in RoUploadRequest
same to 3

12、"OCSP Responder Key Identifier" in RoUploadRequest
same to 4

13、"Certificate Chain" in RoUploadResponse
"MUST be present unless" 10 present.

14、"OCSP Response" in RoUploadResponse
"SHALL be a complete set of valid OCSP responses for the RI's certificate chain".
"will not be sent if" 11 present.