Re: [Sidrops] I-D Action: draft-ietf-sidrops-aspa-profile-15.txt

[Martin Hoffmann <[e-mail]>]

Hi,

Job Snijders wrote:
> 
> The internet-draft changes is best viewed by comparing -13 and -15:
> https://author-tools.ietf.org/iddiff?url1=draft-ietf-sidrops-aspa-profile-13&url2=draft-ietf-sidrops-aspa-profile-15
> 
> An example object is available here:
> rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/5m80fwYws_3FiFD7JiQjAqZ1RYQ.asa

I think that object as well as the example object in the draft are not
actually correct according to the ASN.1 module definition in the draft.

The module is opened with

| DEFINITIONS IMPLICIT TAGS ::=

and the version field is defined as

| version [0]   INTEGER DEFAULT 0,

This means the version should use an implicit tag whereas the objects
use an explicit tag:

|    [0] (1 elem)
|       INTEGER 1

(and implicit tag would be:

|    [0] (1 byte) 01

) 

I _think_ this is an error in the module definitions. All X.509 and CMS
modules seem to use explicit tags for their version fields.

While we are at it, I would like to again raise the suggestion to not
use a version 1 here but rather stick to 0 and use a different
content type OID. The older and newer definitions are not compatible,
so a new OID feels more appropriate than a version change.

  -- Martin