RE: [kmip] KMIP Spec wd06: State Clarification

[John Leiseboer <JL@quintessencelabs.com>]

On Tuesday, 9 July 2013 6:16 AM (AEST), Tim Hudson wrote:

> kmip-spec-v1.2-wd06

> Further to the topic on the various dates, reading back through the
> specification text it isn't actually clearly stated that a managed
> cryptographic object SHALL NOT be used pin the Pre-Active state.

Agreed. Cryptographic operations performed by a client are out of KMIP's control, but we do need clarity and consistency for cryptographic operations specified by KMIP that are performed on the server.

New issue warning: In addition to the new cryptographic services operations, we need to add the Wrap and Unwrap operations to the list of crypto services performed by the server using keys that may have state, or date values that should be denied for the types of operations being requested.

John