ACP 185

UNCLASSIFIED
ACP 185
CHAPTER 3
TECHNICAL INTEROPERABILTY TESTING
OVERVIEW
301. Prior to cross-certification of two NDPKIs, interoperability testing shall be
conducted to analyse and validate the PKIs of the two CCEB partners so that standards
compliance is ensured and to assess that basic PKI services perform as expected across
multiple international domains and repositories.
INTRODUCTION
302. Technical interoperability activities between CCEB nations are intended to test
cross-certificate path building and validation in a test environment prior to bilateral crosscertification
between the operational CAs of the two NDPKIs. Subsequent testing will
focus on establishing stable configurations to support common applications.
PREREQUISITES
Test Infrastructure
303. Each CCEB Nation Participant shall have or establish a test infrastructure that is
representative of their operational environment and is able to issue certificate requests,
issue certificates, sign certificates, revoke certificates and provide the capability for
partners to validate issued certificates.
Certificate Profiles
304. Certificate profiles shall be exchanged among the CCEB Nation Participants that
address the population, or non-population, of the fields and extensions listed below to
enable correct path discovery and validation:
• Policy Object Identifiers (OID)
• Policy OID mappings
• Cryptographic Algorithms
• Name constraints
• Policy constraints
• Basic constraints
• Key usage and extended key usage
• Authority Information Access (AIA)
• Subject Information Access (SIA)
• Subject name
Uncontrolled copy when printed
3-1
UNCLASSIFIED