[P2PSIP] Enrollment server handling base64 encoded csr parameter

"Michael Chen" <michaelc@idssoftware.com> Fri, 21 June 2013 17:08 UTC

Return-Path: <michaelc@idssoftware.com>
X-Original-To: p2psip@ietfa.amsl.com
Delivered-To: p2psip@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1A4021F9F08 for <p2psip@ietfa.amsl.com>; Fri, 21 Jun 2013 10:08:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level:
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q1S5EglOqLoJ for <p2psip@ietfa.amsl.com>; Fri, 21 Jun 2013 10:08:15 -0700 (PDT)
Received: from p3plwbeout03-01.prod.phx3.secureserver.net (p3plsmtp03-01-2.prod.phx3.secureserver.net [72.167.218.213]) by ietfa.amsl.com (Postfix) with ESMTP id 544D921F9F30 for <p2psip@ietf.org>; Fri, 21 Jun 2013 10:08:15 -0700 (PDT)
Received: from localhost ([72.167.218.244]) by p3plwbeout03-01.prod.phx3.secureserver.net with bizsmtp id r58D1l0015GyNsw0158DDe; Fri, 21 Jun 2013 10:08:13 -0700
X-SID: r58D1l0015GyNsw01
Received: (qmail 5152 invoked by uid 99); 21 Jun 2013 17:08:13 -0000
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="=_aa142345cd5e317df2d7fe2a788d0837"
To: Marc Petit-Huguenin <petithug@acm.org>
From: Michael Chen <michaelc@idssoftware.com>
Date: Fri, 21 Jun 2013 10:08:13 -0700
Message-Id: <20130621100813.59ca11a9ba9389561a029f06442e67fa.e623a2cc5a.mailapi@email03.secureserver.net>
X-Originating-IP: 172.249.4.226
User-Agent: MailAPI 24670
X-Sender: michaelc@idssoftware.com
Cc: p2psip@ietf.org
Subject: [P2PSIP] Enrollment server handling base64 encoded csr parameter
X-BeenThere: p2psip@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Peer-to-Peer SIP working group discussion list <p2psip.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/p2psip>, <mailto:p2psip-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/p2psip>
List-Post: <mailto:p2psip@ietf.org>
List-Help: <mailto:p2psip-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/p2psip>, <mailto:p2psip-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Jun 2013 17:08:21 -0000

Hi Marc,
 
A bug in my program sent the following multi-part header followed by the pkcs10 DER binary, but your server ignored the transfer encoding header and processed the csr:
 
--0xD2454C4F
Content-Disposition: form-data; name="csr"
Content-Type: application/pkcs10
Content-Transfer-Encoding: base64
 
<CSR DER binary>
 
--0xD2454C4F


RFC2311 (referenced in section 11.3 of p2psip-base) does describe the use of base64 encoded application/pkcs10 content type (3.7.2). The p2psip-base draft should either endorse or explicitly exclude the base64 encoding stated in RFC2311.
 
Thanks
 
--Michael