HTTPsec Authentication Protocol

7.1. Initialization Request Validation

An initialization request message MUST meet all the following conditions to be considered valid by the responder that receives it:

• The header is well-formed according to the Initialization Request section.
• The url directive satisfies its equivalence condition.
• The dh directive meets these conditions:
  • dh > 1
  • dh < p
  • dh ^ q MOD p = 1
  where p and q are from the Diffie-Hellman group indicated by the accompanying group directive.
• The certificate directive, if present and if considered by the responder, provides a public key that is valid according to the Public Key Algorithm specification, notably regarding minimum key size.
• The certificate directive, if present and if considered by the responder, satisfies locally determined validation constraints, typically with respect to installed certification authority root certificates.