Re: [Anima-bootstrap] [core] Fwd: New Version Notification for draft-vanderstok-core-coap-est-00.txt

Hi Peter

In section 3 of "draft-vanderstok-core-coap-est-00", "Server-generated key" is listed as supported.
This service returns two components, a PKCS8 containing the private key material and a PKCS7 containing the device certificate chain.
In RFC7030, this information is returned using a Content-Type: multipart/mixed.
How this is supported in "draft-vanderstok-core-coap-est-00"?

     REQ: POST /.well-known/est/serverkeygen (Content-Format: application/pkcs10)
     <ASN.1 CertificationRequest>  // Certificate request carry in a PKCS10

    RES: 2.05 Content (Content-Format: ???)
    <ASN.1 ContentSet>            // Private key material for this node carry in a PKCS8
    <ASN.1 ContentInfo>           // Certificate and associated PKI for this node carry in a PKCS7

Regards,
Michel

-----Original Message-----
From: core [mailto:core-bounces@ietf.org] On Behalf Of peter van der Stok
Sent: Saturday, October 29, 2016 11:12 AM
To: Anima-bootstrap <anima-bootstrap@ietf.org>; Core <core@ietf.org>
Subject: [core] Fwd: New Version Notification for draft-vanderstok-core-coap-est-00.txt

Dear all,

we have submitted a new draft  Enrollment over Secure Transport (EST) over coaps to make BRSKI over coap possible.
We expect (parts of) this draft to be integrated with coap-bootstrap draft of pritikin and Kampanakis.
This draft removes EST functionality not absolutely needed within the context we expect the BRSKI deployment for low-resource devices.

Greetings,

Peter

-------- Oorspronkelijke bericht --------
Onderwerp: New Version Notification for draft-vanderstok-core-coap-est-00.txt
Datum: 2016-10-29 17:04
Afzender: internet-drafts@ietf.org
Ontvanger: "Peter van der Stok" <consultancy@vanderstok.org>, "Peter Van der Stok" <consultancy@vanderstok.org>, "Sandeep Kumar" 
<ietf@sandeep.de>, "Sandeep S. Kumar" <ietf@sandeep.de>

A new version of I-D, draft-vanderstok-core-coap-est-00.txt
has been successfully submitted by Peter van der Stok and posted to the IETF repository.

Name:		draft-vanderstok-core-coap-est
Revision:	00
Title:		EST based on DTLS secured CoAP (EST-coaps)
Document date:	2016-10-29
Group:		Individual Submission
Pages:		15
URL:            
https://www.ietf.org/internet-drafts/draft-vanderstok-core-coap-est-00.txt
Status:         
https://datatracker.ietf.org/doc/draft-vanderstok-core-coap-est/
Htmlized:       
https://tools.ietf.org/html/draft-vanderstok-core-coap-est-00

Abstract:
    Low-resource devices in a Low-power and Lossy Network (LLN) can
    operate in a mesh network using the IPv6 over Low-power Personal Area
    Networks (6LoWPAN) and IEEE 802.15.4 link-layer standards.
    Provisioning these devices in a secure manner with keys (often called
    security bootstrapping) used to encrypt and authenticate messages is
    the subject of Bootstrapping of Remote Secure Key Infrastructures
    (BRSKI) [I-D.ietf-anima-bootstrapping-keyinfra].  Enrollment over
    Secure Transport (EST) [RFC7030], based on TLS and HTTP, is used for
    BRSKI.  This document defines how low-resource devices are expected
    to use EST over DTLS and CoAP. 6LoWPAN fragmentation management and
    minor extensions to CoAP are needed to enable EST over DTLS-secured
    CoAP (EST-coaps).

Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat

_______________________________________________
core mailing list
core@ietf.org
https://www.ietf.org/mailman/listinfo/core