[pkix] CertBag attribute to indicate root of trust?

Michael StJohns <mstjohns@comcast.net> Fri, 02 November 2012 04:07 UTC

Return-Path: <mstjohns@comcast.net>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0EC2E21F9947 for <pkix@ietfa.amsl.com>; Thu, 1 Nov 2012 21:07:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -99.002
X-Spam-Level:
X-Spam-Status: No, score=-99.002 tagged_above=-999 required=5 tests=[AWL=-0.979, BAYES_40=-0.185, FH_RELAY_NODNS=1.451, HELO_MISMATCH_NET=0.611, RDNS_NONE=0.1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TGXroDQi07-g for <pkix@ietfa.amsl.com>; Thu, 1 Nov 2012 21:07:22 -0700 (PDT)
Received: from qmta14.westchester.pa.mail.comcast.net (qmta14.westchester.pa.mail.comcast.net [IPv6:2001:558:fe14:44:76:96:59:212]) by ietfa.amsl.com (Postfix) with ESMTP id 63CBD21F987F for <pkix@ietf.org>; Thu, 1 Nov 2012 21:07:21 -0700 (PDT)
Received: from omta03.westchester.pa.mail.comcast.net ([76.96.62.27]) by qmta14.westchester.pa.mail.comcast.net with comcast id JTuz1k0020bG4ec5EU7PPs; Fri, 02 Nov 2012 04:07:23 +0000
Received: from Mike-T530.comcast.net ([68.83.212.126]) by omta03.westchester.pa.mail.comcast.net with comcast id JU751k00F2kB7pQ3PU75Ls; Fri, 02 Nov 2012 04:07:05 +0000
X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9
Date: Fri, 02 Nov 2012 00:07:26 -0400
To: pkix@ietf.org
From: Michael StJohns <mstjohns@comcast.net>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Message-Id: <20121102040722.63CBD21F987F@ietfa.amsl.com>
Subject: [pkix] CertBag attribute to indicate root of trust?
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 02 Nov 2012 04:07:23 -0000

Can any one point me to a defined OID and Attribute class definition that could be used in a PKCS12 CertBag attribute set to indicate that the certificate in the CertBag is a trust anchor?

I think I'm looking for something similar to the CommonCertificateAttributes in PKCS15, but there's no defined OID for that object class.

Mike