[pkix] [Technical Errata Reported] RFC5912 (6806)

RFC Errata System <rfc-editor@rfc-editor.org> Mon, 03 January 2022 21:14 UTC

To: paul.hoffman@vpnc.org, jimsch@exmsft.com, rdd@cert.org, kaduk@mit.edu, kent@bbn.com, stefan@aaa-sec.com
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: carl@redhoundsoftware.com, pkix@ietf.org, rfc-editor@rfc-editor.org
Content-Type: text/plain; charset="UTF-8"
Message-Id: <20220103211455.A812C358B4@rfc-editor.org>
Date: Mon, 03 Jan 2022 13:14:55 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/pkix/ZGGnYL9X4MTdRLGarpvwCH-pio0>
Subject: [pkix] [Technical Errata Reported] RFC5912 (6806)
Precedence: list

The following errata report has been submitted for RFC5912,
"New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)".

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid6806

--------------------------------------
Type: Technical
Reported by: Carl Wallace <carl@redhoundsoftware.com>

Section: 6

Original Text
-------------
   pk-rsa PUBLIC-KEY ::= {
    IDENTIFIER rsaEncryption
    KEY RSAPublicKey
    PARAMS TYPE NULL ARE absent
    -- Private key format not in this module --
    CERT-KEY-USAGE {digitalSignature, nonRepudiation,
    keyEncipherment, dataEncipherment, keyCertSign, cRLSign}
   }

Corrected Text
--------------
   pk-rsa PUBLIC-KEY ::= {
    IDENTIFIER rsaEncryption
    KEY RSAPublicKey
    PARAMS TYPE NULL ARE required
    -- Private key format not in this module --
    CERT-KEY-USAGE {digitalSignature, nonRepudiation,
    keyEncipherment, dataEncipherment, keyCertSign, cRLSign}
   }

Notes
-----
Section 2.3.1 of RFC 3279 states "(t)he parameters field MUST have ASN.1 type NULL for this algorithm identifier."

Instructions:
-------------
This erratum is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party  
can log in to change the status and edit the report, if necessary. 

--------------------------------------
RFC5912 (draft-ietf-pkix-new-asn1-08)
--------------------------------------
Title               : New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)
Publication Date    : June 2010
Author(s)           : P. Hoffman, J. Schaad
Category            : INFORMATIONAL
Source              : Public-Key Infrastructure (X.509)
Area                : Security
Stream              : IETF
Verifying Party     : IESG

[pkix] [Technical Errata Reported] RFC5912 (6806) RFC Errata System
Re: [pkix] [Technical Errata Reported] RFC5912 (6… Russ Housley
Re: [pkix] [Technical Errata Reported] RFC5912 (6… Benjamin Kaduk