[pkix] [Technical Errata Reported] RFC7030 (4384)

RFC Errata System <rfc-editor@rfc-editor.org> Tue, 02 June 2015 11:36 UTC

To: pritikin@cisco.com, peter@akayla.com, dharkins@arubanetworks.com, stephen.farrell@cs.tcd.ie, Kathleen.Moriarty.ietf@gmail.com, kent@bbn.com, stefan@aaa-sec.com
From: RFC Errata System <rfc-editor@rfc-editor.org>
Message-Id: <20150602113342.04F62180207@rfc-editor.org>
Date: Tue, 02 Jun 2015 04:33:42 -0700
Archived-At: <http://mailarchive.ietf.org/arch/msg/pkix/LIr35lmBH3itFWYwKKxSNA6l_Lo>
Cc: pkix@ietf.org, pierce.leonberger@baesystems.com, rfc-editor@rfc-editor.org
Subject: [pkix] [Technical Errata Reported] RFC7030 (4384)
Precedence: list

The following errata report has been submitted for RFC7030,
"Enrollment over Secure Transport".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=7030&eid=4384

--------------------------------------
Type: Technical
Reported by: Pierce Leonberger <pierce.leonberger@baesystems.com>

Section: 4.5.2

Original Text
-------------
CsrAttrs ::= SEQUENCE SIZE (0..MAX) OF AttrOrOID

AttrOrOID ::= CHOICE (oid OBJECT IDENTIFIER, attribute Attribute }

Attribute { ATTRIBUTE:IOSet } ::= SEQUENCE {
     type   ATTRIBUTE.&id({IOSet}),
     values SET SIZE(1..MAX) OF ATTRIBUTE.&Type({IOSet}{@type}) }

Corrected Text
--------------
AttrOrOID ::= CHOICE {
      oid OBJECT IDENTIFIER, 
      attribute Attribute{YouNeedToDefineOrReferenceAnObjectSet}
}

Notes
-----
1. The AttrOrOID CHOICE was started with a '(' versus a '{'.

2. Attribute{} is a parameterized type and you are missing the parameter reference within the AttrOrOID CHOICE for "attribute".

3. You need to define or reference the object set to be used in #2.

Highly recommend you create an ASN.1 Module as part of this specification.  This will make it clear which specifications (and the versions there of) you are importing types from (i.e. Attribute{}) and the tagging that should be used (module level).  If you need to define a new object set for #3 then this new module would be the perfect home for it.

Instructions:
-------------
This erratum is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party (IESG)
can log in to change the status and edit the report, if necessary. 

--------------------------------------
RFC7030 (draft-ietf-pkix-est-09)
--------------------------------------
Title               : Enrollment over Secure Transport
Publication Date    : October 2013
Author(s)           : M. Pritikin, Ed., P. Yee, Ed., D. Harkins, Ed.
Category            : PROPOSED STANDARD
Source              : Public-Key Infrastructure (X.509)
Area                : Security
Stream              : IETF
Verifying Party     : IESG

[pkix] [Technical Errata Reported] RFC7030 (4384) RFC Errata System