Re: [Sidrops] I-D Action: draft-ietf-sidrops-6486bis-06.txt

[Russ Housley <[e-mail]>]

> On Sep 30, 2021, at 4:52 PM, Ben Maddison <benm=[e-mail]> wrote:
> 
> Signed PGP part
> Hi Russ,
> 
> On 09/30, Russ Housley wrote:
>> 
>> 
>>> appendix A:
>>>   The ASN.1 module should define an instance of the CONTENT-TYPE
>>>   class:
>>> 
>>>   ```
>>>   IMPORTS
>>>     CONTENT-TYPE FROM CryptographicMessageSyntax-2010 -- in [RFC6268]
>>>       { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1)
>>>         pkcs-9(9) smime(16) modules(0) id-mod-cms-2009(58) }
>>> 
>>>   ct-rpkiManifest CONTENT-TYPE ::=
>>>       { TYPE Manifest IDENTIFIED BY id-ct-rpkiManifest }
>>>   ```
>> 
>> I agree, it would be good to include an updates ASN.1 module.  To do so, we need to ask IANA to assign a module identifier.
>> 
>> The improved module is here:
>> 
>> ...
>> 
>>   CONTENT-TYPE
>>      FROM CryptographicMessageSyntax-2009 -- in [RFC5911]
>>      { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1)
>>        pkcs-9(9) smime(16) modules(0) id-mod-cms-2004-02(41) } ;
>> 
> Why CMS-2009 rather than CMS-2010?

Thanks.  It is better to use RFC 6268...

   RPKIManifest-2021
      { iso(1) member-body(2) us(840) rsadsi(113549)
        pkcs(1) pkcs9(9) smime(16) mod(0) TBD }
    
   DEFINITIONS EXPLICIT TAGS ::=
   BEGIN
   
   -- EXPORTS ALL --

   IMPORTS

     CONTENT-TYPE
     FROM CryptographicMessageSyntax-2010 -- in [RFC6268]
       { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1)
         pkcs-9(9) smime(16) modules(0) id-mod-cms-2009(58) } ;

   -- Manifest Content Type

   ct-rpkiManifest CONTENT-TYPE ::=
       { TYPE Manifest IDENTIFIED BY id-ct-rpkiManifest }

   id-smime OBJECT IDENTIFIER ::= { iso(1) member-body(2)
       us(840) rsadsi(113549) pkcs(1) pkcs9(9) 16 }

   id-ct OBJECT IDENTIFIER ::= { id-smime 1 }

   id-ct-rpkiManifest OBJECT IDENTIFIER ::= { id-ct 26 }

   Manifest ::= SEQUENCE {
      version        [0] INTEGER DEFAULT 0,
      manifestNumber     INTEGER (0..MAX),
      thisUpdate         GeneralizedTime,
      nextUpdate         GeneralizedTime,
      fileHashAlg        OBJECT IDENTIFIER,
      fileList           SEQUENCE SIZE (0..MAX) OF FileAndHash
      }

   FileAndHash ::= SEQUENCE {
      file  IA5String,
      hash  BIT STRING
      }

   END