Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-norevavail-00
Mike Ounsworth <Mike.Ounsworth@entrust.com> Tue, 23 May 2023 18:52 UTC
Return-Path: <Mike.Ounsworth@entrust.com>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7FAC2C14CF1B for <spasm@ietfa.amsl.com>; Tue, 23 May 2023 11:52:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.996
X-Spam-Level:
X-Spam-Status: No, score=-6.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=entrust.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ug1zG9yrAoUn for <spasm@ietfa.amsl.com>; Tue, 23 May 2023 11:51:56 -0700 (PDT)
Received: from mx08-0015a003.pphosted.com (mx08-0015a003.pphosted.com [185.183.30.227]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3C496C15155A for <spasm@ietf.org>; Tue, 23 May 2023 11:51:56 -0700 (PDT)
Received: from pps.filterd (m0242863.ppops.net [127.0.0.1]) by mx08-0015a003.pphosted.com (8.17.1.19/8.17.1.19) with ESMTP id 34NHQYSl002808; Tue, 23 May 2023 13:51:46 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=entrust.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=mail1; bh=rUMzOySVG+frOgso6Hu9MVqyjbTKt0HnxVtAZ7E2wgg=; b=Fj/jPsdbFIQSZEY9L1eGyLYvFo/1g0innz9VrOqaqIfE/2sYmCp4XYcWa6o3vrT7+IZt zOOnSX/4d9NAq/t3JGjj0BbUZX/MPk7xIebBWoD00z+RkUXpUjPs4jhcDApfA/vEmySk 8kj1Yd+6bDchFmmKYDoj9ZpfTajrHO0Qng4MK9rLNUQ6Irz9o/ayiBhy/jgFGTWH4BFt 29qc+TIGsMI3nCUpvVXYEbpMywP5J6jh6jeSkyvU45gEoXzwsOZsG35z84fdDCOxbKaF KZFrxq3zaLE3LqspN+0UjaUI1A8+w+Lja3L4WpWVGeuxYddQt8I71nU7vG8QLQqUPJU2 OQ==
Received: from nam12-bn8-obe.outbound.protection.outlook.com (mail-bn8nam12lp2171.outbound.protection.outlook.com [104.47.55.171]) by mx08-0015a003.pphosted.com (PPS) with ESMTPS id 3qr7dtdsnq-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 23 May 2023 13:51:46 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Sirps7bbBrvXi88s1lQgn2is5RCSFjFOs3HhoIGT2D60sv85xUwer7+KN+TwFLuAQNJx/N5BJrKPtISTk+tv0irHw+wC9t7CExxr4rHihNNS83YqzwnVUF2/pJXHxEFD+XT3VJFL60eg6hL6GvP44lvuGurLDchDHJsywVB0lRruWsno2JQ2nzV+UWOQA5Hqjb2NypiYKEVEcvQfYYWkCiokt5KLireHw1N/YzSSgHoxOCfbdk8EQbN/NpaBYnM/grH4EHvatZXYOWa9EN9tafp1evcoCCoyWKIEnNb/SHOrkEA5M/gdUeDWbwGV9l+c3PPKf2WW79NMBiaWJiT/HQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=rUMzOySVG+frOgso6Hu9MVqyjbTKt0HnxVtAZ7E2wgg=; b=OofC+Jm2QAO2S+6Vwm5cQYFwM36HpRgruxTRpnsg/Xc+B94yUh61cgkwR7XWJE8bKTROGp/OoFGi1ONOpQT97elEmOyoLJJiWI8MmzY36t4aCoh9MVGWdW/chOrRVZZm7dbvhSRd0aHVyYDPkvsHgLrro8pvH53zZp7Jjj57bSmWomrKYDMKeKJ6/oxoq+7YqerM6Epv4MLklv3IwhGtLf4yIlfZ/BJDezK2xOgxbgjjFaEv5szzx5AHb7B0lMs8hYvr0KeNJrEDoMgGVZpVxfujvE6DAYN91qd77GNoo+sSOGsleq/KC7lGatJNuDtzqjmcf+dyw5xjMpA1K/8zIA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=entrust.com; dmarc=pass action=none header.from=entrust.com; dkim=pass header.d=entrust.com; arc=none
Received: from DM8PR11MB5736.namprd11.prod.outlook.com (2603:10b6:8:11::11) by SJ2PR11MB8369.namprd11.prod.outlook.com (2603:10b6:a03:53d::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6411.27; Tue, 23 May 2023 18:51:39 +0000
Received: from DM8PR11MB5736.namprd11.prod.outlook.com ([fe80::abc2:71f2:8905:2118]) by DM8PR11MB5736.namprd11.prod.outlook.com ([fe80::abc2:71f2:8905:2118%3]) with mapi id 15.20.6411.028; Tue, 23 May 2023 18:51:39 +0000
From: Mike Ounsworth <Mike.Ounsworth@entrust.com>
To: Mike Ounsworth <Mike.Ounsworth=40entrust.com@dmarc.ietf.org>, Russ Housley <housley@vigilsec.com>, Tim Hollebeek <tim.hollebeek@digicert.com>
CC: Seo Suchan <tjtncks@gmail.com>, LAMPS <spasm@ietf.org>
Thread-Topic: [lamps] [EXTERNAL] Re: draft-housley-lamps-norevavail-00
Thread-Index: AQHZjYwDyIYYJ2h2006541P4G+o7xa9oLW0AgAAGM0CAAABKEA==
Date: Tue, 23 May 2023 18:51:39 +0000
Message-ID: <DM8PR11MB5736E02D5E52113CAD16A6289F409@DM8PR11MB5736.namprd11.prod.outlook.com>
References: <168444309553.24047.14923062710269229403@ietfa.amsl.com> <E2BE1DCD-A241-4DDF-A5EC-DD3209C4CDA2@vigilsec.com> <a2122a10-fdfd-aabc-5c3c-242d90bd4175@gmail.com> <D18F7C58-EC30-4640-9AB7-94E428B79F62@vigilsec.com> <CH0PR11MB5739CD4F7CCE62CE34E4B7319F7C9@CH0PR11MB5739.namprd11.prod.outlook.com> <3FEBFDE6-1AA9-4615-AFA7-FB0B650A5DAB@vigilsec.com> <SN7PR14MB6492368040612089C83EB21983409@SN7PR14MB6492.namprd14.prod.outlook.com> <FBE4078F-33C0-49E0-A25C-69BCA88DC0E6@vigilsec.com> <DM8PR11MB5736036B93C87D3F6A719DE09F409@DM8PR11MB5736.namprd11.prod.outlook.com>
In-Reply-To: <DM8PR11MB5736036B93C87D3F6A719DE09F409@DM8PR11MB5736.namprd11.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: DM8PR11MB5736:EE_|SJ2PR11MB8369:EE_
x-ms-office365-filtering-correlation-id: 5168bb2f-a20c-4969-65a6-08db5bbebe5a
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM8PR11MB5736.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230028)(4636009)(136003)(39860400002)(376002)(366004)(396003)(346002)(451199021)(41300700001)(7696005)(71200400001)(26005)(53546011)(6506007)(9686003)(316002)(55016003)(122000001)(8676002)(5660300002)(52536014)(8936002)(966005)(38100700002)(86362001)(478600001)(83380400001)(38070700005)(110136005)(54906003)(2906002)(2940100002)(166002)(33656002)(186003)(76116006)(66476007)(66946007)(64756008)(66556008)(66446008)(4326008); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_DM8PR11MB5736E02D5E52113CAD16A6289F409DM8PR11MB5736namp_"
MIME-Version: 1.0
X-OriginatorOrg: entrust.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DM8PR11MB5736.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 5168bb2f-a20c-4969-65a6-08db5bbebe5a
X-MS-Exchange-CrossTenant-originalarrivaltime: 23 May 2023 18:51:39.8012 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f46cf439-27ef-4acf-a800-15072bb7ddc1
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: WUT/dPFfh3FcJ4fEjHZUT3vSVj/SvTyKaZPfO6RAYRNPyOl/gnAORxQCtffGE5VOCWhjei4M2usVYhz9sH9Q5BLLgjy5tpCMfI/UJf4PuOE=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ2PR11MB8369
X-Proofpoint-GUID: _kYVIFT-8PzaINvUEloIu89nEOOYkbwq
X-Proofpoint-ORIG-GUID: _kYVIFT-8PzaINvUEloIu89nEOOYkbwq
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.254,Aquarius:18.0.957,Hydra:6.0.573,FMLib:17.11.176.26 definitions=2023-05-23_12,2023-05-23_02,2023-05-22_02
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 lowpriorityscore=0 bulkscore=0 spamscore=0 adultscore=0 impostorscore=0 malwarescore=0 mlxlogscore=999 mlxscore=0 suspectscore=0 priorityscore=1501 clxscore=1015 phishscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2304280000 definitions=main-2305230152
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/4SSbM6b8oWkAa27eJeRrVBSCJns>
Subject: Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-norevavail-00
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 23 May 2023 18:52:00 -0000
I’m curious for Tim to present this change at CA/B and see if anyone freaks out that this will break their super clever use of that extension. --- Mike Ounsworth From: Spasm <spasm-bounces@ietf.org> On Behalf Of Mike Ounsworth Sent: Tuesday, May 23, 2023 1:50 PM To: Russ Housley <housley@vigilsec.com>; Tim Hollebeek <tim.hollebeek@digicert.com> Cc: Seo Suchan <tjtncks@gmail.com>; LAMPS <spasm@ietf.org> Subject: Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-norevavail-00 Awesome. --- Mike Ounsworth From: Spasm <spasm-bounces@ietf.org<mailto:spasm-bounces@ietf.org>> On Behalf Of Russ Housley Sent: Tuesday, May 23, 2023 1:28 PM To: Tim Hollebeek <tim.hollebeek@digicert.com<mailto:tim.hollebeek@digicert.com>> Cc: Seo Suchan <tjtncks@gmail.com<mailto:tjtncks@gmail.com>>; LAMPS <spasm@ietf.org<mailto:spasm@ietf.org>> Subject: Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-norevavail-00 PROPOSED ERRATA for RFC 6960, Section 4.2.2.2.1 OLD: - A CA may specify that an OCSP client can trust a responder for the lifetime of the responder's certificate. The CA does so by including the extension id-pkix-ocsp-nocheck. This SHOULD be a non-critical extension. The value of the extension SHALL be NULL. CAs issuing such a certificate should realize that a compromise of the responder's key is as serious as the compromise of a CA key used to sign CRLs, at least for the validity period of this certificate. CAs may choose to issue this type of certificate with a very short lifetime and renew it frequently. id-pkix-ocsp-nocheck OBJECT IDENTIFIER ::= { id-pkix-ocsp 5 } NEW: - A CA may specify that an OCSP client can trust a responder for the lifetime of the responder's certificate. The CA does so by including the extension id-pkix-ocsp-nocheck. This SHOULD be a non-critical extension. The value of the extension SHALL be NULL. CAs issuing such a certificate should realize that a compromise of the responder's key is as serious as the compromise of a CA key used to sign CRLs, at least for the validity period of this certificate. CAs may choose to issue this type of certificate with a very short lifetime and renew it frequently. id-pkix-ocsp-nocheck OBJECT IDENTIFIER ::= { id-pkix-ocsp 5 } A CA MUST NOT include the extension id-pkix-ocsp-nocheck in a certificate issued to an entity other than an OCSP Responder. Russ On May 23, 2023, at 11:34 AM, Tim Hollebeek <tim.hollebeek=40digicert.com@dmarc.ietf.org<mailto:tim.hollebeek=40digicert.com@dmarc.ietf.org>> wrote: Would it be useful to clearly and explicitly state this unstated assumption somewhere, perhaps in an errata? “id-pkix-ocsp-nocheck SHALL NOT appear in a certificate unless that certificate is a delegated OCSP responder” would probably be a good thing to have stated somewhere. I suppose it could be added to the CABF BRs as well. They have the same bug (the BRs require nocheck in delegated OCSP responders, but don’t prohibit it elsewhere). -Tim From: Spasm <spasm-bounces@ietf.org<mailto:spasm-bounces@ietf.org>> On Behalf Of Russ Housley Sent: Sunday, May 21, 2023 1:16 PM To: Mike Ounsworth <Mike.Ounsworth@entrust.com<mailto:Mike.Ounsworth@entrust.com>> Cc: Seo Suchan <tjtncks@gmail.com<mailto:tjtncks@gmail.com>>; LAMPS <spasm@ietf.org<mailto:spasm@ietf.org>> Subject: Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-norevavail-00 Mike: Interesting RFC6960, section “4.2.2.2.1<https://urldefense.com/v3/__https:/www.rfc-editor.org/rfc/rfc6960*section-4.2.2.2.1__;Iw!!FJ-Y8qCqXTj2!bi4AP-jeHViS93BjOd8QnyeP4SNKwkRxB41odNjHI9eRADjzQrv6bxRkdoqg26cVEf1o0ymsz-zvssr8LsCiZYw0OHYB$>. Revocation Checking of an Authorized Responder” “A CA may specify that an OCSP client can trust a responder for the lifetime of the responder's certificate. The CA does so by including the extension id-pkix-ocsp-nocheck” Are you allowed to put an id-pkix-ocsp-nocheck extension in end entity certs? If so, what does that mean? My reading of the description is that id-pkix-ocsp-nocheck should only appear in a certificate issued to an OCSP responder. Russ _______________________________________________ Spasm mailing list Spasm@ietf.org<mailto:Spasm@ietf.org> https://www.ietf.org/mailman/listinfo/spasm<https://urldefense.com/v3/__https:/www.ietf.org/mailman/listinfo/spasm__;!!FJ-Y8qCqXTj2!bi4AP-jeHViS93BjOd8QnyeP4SNKwkRxB41odNjHI9eRADjzQrv6bxRkdoqg26cVEf1o0ymsz-zvssr8LsCiZf8_jufn$> Any email and files/attachments transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If this message has been sent to you in error, you must not copy, distribute or disclose of the information it contains. Please notify Entrust immediately and delete the message from your system.
- [lamps] draft-housley-lamps-norevavail-00 Russ Housley
- Re: [lamps] draft-housley-lamps-norevavail-00 Tomofumi Okubo
- Re: [lamps] draft-housley-lamps-norevavail-00 Tim Hollebeek
- Re: [lamps] draft-housley-lamps-norevavail-00 Mike Ounsworth
- Re: [lamps] draft-housley-lamps-norevavail-00 Salz, Rich
- Re: [lamps] draft-housley-lamps-norevavail-00 Salz, Rich
- Re: [lamps] draft-housley-lamps-norevavail-00 Russ Housley
- Re: [lamps] draft-housley-lamps-norevavail-00 Russ Housley
- Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-no… Mike Ounsworth
- Re: [lamps] draft-housley-lamps-norevavail-00 Mike Ounsworth
- Re: [lamps] draft-housley-lamps-norevavail-00 Tim Hollebeek
- Re: [lamps] draft-housley-lamps-norevavail-00 Tim Hollebeek
- Re: [lamps] draft-housley-lamps-norevavail-00 Russ Housley
- Re: [lamps] draft-housley-lamps-norevavail-00 Seo Suchan
- Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-no… Mike Ounsworth
- Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-no… Russ Housley
- Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-no… Deb Cooley
- Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-no… Mike Ounsworth
- Re: [lamps] draft-housley-lamps-norevavail-00 Jeffrey Walton
- Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-no… Watson Ladd
- Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-no… Mike Ounsworth
- Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-no… Tim Hollebeek
- Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-no… Tim Hollebeek
- Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-no… Russ Housley
- Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-no… Mike Ounsworth
- Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-no… Mike Ounsworth
- Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-no… Mike Ounsworth
- Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-no… Russ Housley
- Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-no… Salz, Rich
- Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-no… Mike Ounsworth
- Re: [lamps] [EXTERNAL] Re: draft-housley-lamps-no… Michael StJohns