Re: [pkix] a question of cert (and OCSP) extension syntax

Melinda Shore <melinda.shore@gmail.com> Tue, 31 March 2015 15:51 UTC

Message-ID: <551AC28D.3010202@gmail.com>
Date: Tue, 31 Mar 2015 07:51:41 -0800
From: Melinda Shore <melinda.shore@gmail.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
MIME-Version: 1.0
To: pkix@ietf.org
References: <00d201d06b68$779e2c90$66da85b0$@akayla.com> <B679DABC-5B8B-40C4-A7C3-527227D4A876@vpnc.org> <9CF25F90-396C-4341-B04D-E850BDBA7339@vigilsec.com> <5C63864B-CE7F-4118-BDC5-2E0419704CB5@vpnc.org>
In-Reply-To: <5C63864B-CE7F-4118-BDC5-2E0419704CB5@vpnc.org>
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Archived-At: <http://mailarchive.ietf.org/arch/msg/pkix/sZWbb2XkaXmWAMMDZl32O5W5bdA>
Subject: Re: [pkix] a question of cert (and OCSP) extension syntax
Precedence: list

On 3/31/15 7:18 AM, Paul Hoffman wrote:
> On Mar 31, 2015, at 8:03 AM, Russ Housley <housley@vigilsec.com>
> wrote:
>> ASN.1 processing is needed to get the value of the OCTET STRING
>> from the extension, so I do not understand the point you are trying
>> to make.
> 
> At the beginning of the thread, it seemed like the issue was
> *encoding* the values, not decoding them. 

Right, but there seems to be some suggestion that there is
certificate processing software out there that tries to decode
the contents of an extension it doesn't recognize or
understand.  I'm hopeful that people raising this concern can
be more specific and point out what software it is.  *That*
would be a pretty good example of the new information we've
been asking for.

Melinda

[pkix] a question of cert (and OCSP) extension sy… Stephen Kent
Re: [pkix] a question of cert (and OCSP) extensio… Peter Gutmann
Re: [pkix] a question of cert (and OCSP) extensio… Manger, James
Re: [pkix] a question of cert (and OCSP) extensio… Rob Stradling
Re: [pkix] a question of cert (and OCSP) extensio… Peter Gutmann
Re: [pkix] a question of cert (and OCSP) extensio… Melinda Shore
Re: [pkix] a question of cert (and OCSP) extensio… Paul Hoffman
Re: [pkix] a question of cert (and OCSP) extensio… Denis
Re: [pkix] a question of cert (and OCSP) extensio… Stephen Kent
Re: [pkix] a question of cert (and OCSP) extensio… Sean Leonard
Re: [pkix] a question of cert (and OCSP) extensio… Sean Leonard
Re: [pkix] a question of cert (and OCSP) extensio… Rob Stradling
[pkix] update on ITU-T Public-key infrastructure:… Tony Rutkowski
Re: [pkix] update on ITU-T Public-key infrastruct… Erik Andersen
Re: [pkix] update on ITU-T Public-key infrastruct… George Michaelson
Re: [pkix] a question of cert (and OCSP) extensio… Massimiliano Pala
Re: [pkix] a question of cert (and OCSP) extensio… Massimiliano Pala
Re: [pkix] a question of cert (and OCSP) extensio… Rob Stradling
Re: [pkix] a question of cert (and OCSP) extensio… Paul Hoffman
[pkix] Cryptographic Message Syntax Tony Rutkowski
Re: [pkix] a question of cert (and OCSP) extensio… Russ Housley
Re: [pkix] a question of cert (and OCSP) extensio… Paul Hoffman
Re: [pkix] a question of cert (and OCSP) extensio… Russ Housley
Re: [pkix] Cryptographic Message Syntax Russ Housley
Re: [pkix] a question of cert (and OCSP) extensio… Yoav Nir
Re: [pkix] a question of cert (and OCSP) extensio… Sean Leonard
Re: [pkix] a question of cert (and OCSP) extensio… Peter Yee
Re: [pkix] a question of cert (and OCSP) extensio… Stephen Farrell
Re: [pkix] a question of cert (and OCSP) extensio… Paul Hoffman
Re: [pkix] a question of cert (and OCSP) extensio… Russ Housley
Re: [pkix] a question of cert (and OCSP) extensio… Paul Hoffman
Re: [pkix] a question of cert (and OCSP) extensio… Melinda Shore
Re: [pkix] a question of cert (and OCSP) extensio… Santosh Chokhani
Re: [pkix] a question of cert (and OCSP) extensio… Peter Yee
Re: [pkix] a question of cert (and OCSP) extensio… Melinda Shore
Re: [pkix] a question of cert (and OCSP) extensio… Eric Rescorla