Re: New Liaison Statement, "Liaison to IETF on the removal of upper bound in X.509"

"David A. Cooper" <david.cooper@nist.gov> Mon, 15 October 2007 19:55 UTC

Return-path: <owner-ietf-pkix@mail.imc.org>
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IhW1v-00068f-1B for pkix-archive@lists.ietf.org; Mon, 15 Oct 2007 15:55:11 -0400
Received: from balder-227.proper.com ([192.245.12.227]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1IhW1g-0001Uj-2F for pkix-archive@lists.ietf.org; Mon, 15 Oct 2007 15:55:02 -0400
Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id l9FJB5iW022810 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 15 Oct 2007 12:11:05 -0700 (MST) (envelope-from owner-ietf-pkix@mail.imc.org)
Received: (from majordom@localhost) by balder-227.proper.com (8.13.5/8.13.5/Submit) id l9FJB5GS022809; Mon, 15 Oct 2007 12:11:05 -0700 (MST) (envelope-from owner-ietf-pkix@mail.imc.org)
X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-pkix@mail.imc.org using -f
Received: from smtp.nist.gov (rimp1.nist.gov [129.6.16.226]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id l9FJAx1c022782 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for <ietf-pkix@imc.org>; Mon, 15 Oct 2007 12:11:04 -0700 (MST) (envelope-from david.cooper@nist.gov)
Received: from postmark.nist.gov (emailha1.nist.gov [129.6.16.196]) by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id l9FJAoDC000413 for <ietf-pkix@imc.org>; Mon, 15 Oct 2007 15:10:51 -0400
Received: from st26.ncsl.nist.gov (st26.ncsl.nist.gov [129.6.54.72]) by postmark.nist.gov (8.13.1/8.13.1) with ESMTP id l9FJAGIp027830 for <ietf-pkix@imc.org>; Mon, 15 Oct 2007 15:10:17 -0400
Message-ID: <4713BB5A.6000801@nist.gov>
Date: Mon, 15 Oct 2007 15:11:22 -0400
From: "David A. Cooper" <david.cooper@nist.gov>
User-Agent: Thunderbird 2.0.0.4 (X11/20070620)
MIME-Version: 1.0
To: pkix <ietf-pkix@imc.org>
Subject: Re: New Liaison Statement, "Liaison to IETF on the removal of upper bound in X.509"
References: <4707E6DA.1070703@cs.tcd.ie> <2788466ED3E31C418E9ACC5C316615570536E1@mou1wnexmb09.vcorp.ad.vrsn.com> <FA998122A677CF4390C1E291BFCF59890849839E@EXCH.missi.ncsc.mil> <470BB253.3030703@cs.tcd.ie> <FA998122A677CF4390C1E291BFCF598908498416@EXCH.missi.ncsc.mil> <470C1C32.70603@eb2bcom.com> <E75F200AF1718F45B2024A88C3141A1D06437A82F3@EA-EXMSG-C320.europe.corp.micr osoft.com> <p0624082cc331ad9846db@[192.168.1.100]> <470C1FA3.40000@eb2bcom.com> <p06240801c332913ed8ad@[192.168.1.3]> <470EC778.500@eb2bcom.com> <p06240822c33533e1b00d@[192.168.1.3]> <FA998122A677CF4390C1E291BFCF5989085414FA@EXCH.missi.ncsc.mil> <4713A14B.5040906@kent.ac.uk> <p0624080cc33956827330@[10.1.0.77]>
In-Reply-To: <p0624080cc33956827330@[10.1.0.77]>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
X-NIST-MailScanner-Information:
X-NIST-MailScanner: Found to be clean
X-NIST-MailScanner-From: david.cooper@nist.gov
Sender: owner-ietf-pkix@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-pkix/mail-archive/>
List-ID: <ietf-pkix.imc.org>
List-Unsubscribe: <mailto:ietf-pkix-request@imc.org?body=unsubscribe>
X-Spam-Score: 0.0 (/)
X-Scan-Signature: e1e48a527f609d1be2bc8d8a70eb76cb

Paul,

Here is a web site that contains the ASN.1 modules for "X-Series 
Recommendations":  http://www.itu.int/ITU-T/asn1/database/itu-t/x

It appears that the upper bounds module, which appears in X.520, has 
changed with each edition.  At least, the web site indicates that the 
OID for the module has changed from the 1997 edition to the 2001 
edition, and again with the publication of the 2005 edition.  I didn't 
attempt to compare the modules to see how they changed.

Dave

Paul Hoffman wrote:
>
> At 6:20 PM +0100 10/15/07, David Chadwick wrote:
>> It is written at the start of Annex C of X.521, as copied below
>>
>>> Annex C
>>>
>>> Upper bounds
>>> (This annex does not form an integral part of this Recommendation | 
>>> International Standard)
>>> This annex includes all of the suggested upper bound value 
>>> constraints used in these Directory Specifications, in the form of 
>>> the ASN.1 module UpperBounds.
>>>
>>> UpperBounds {joint-iso-itu-t ds(5) module(1) upperBounds(10) 5}
>>> DEFINITIONS ::=
>>> BEGIN
>
> Could you show the whole Annex? That is, could we see all the upper 
> bounds listed? Or, is there just a blank line and "END"? :-)
>
>
> --Paul Hoffman, Director
> --VPN Consortium
>
>