IETF Logo Mail Archive

Re: [lamps] Fixed the RFC 8994 / ACP Subject Alternative Name example - Re: struggling with CSRAttrs

"von Oheimb, David" <david.von.oheimb@siemens.com> Sat, 01 October 2022 09:31 UTC

Return-Path: <david.von.oheimb@siemens.com>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02AB5C14F74F for <spasm@ietfa.amsl.com>; Sat, 1 Oct 2022 02:31:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.108
X-Spam-Level:
X-Spam-Status: No, score=-2.108 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=siemens.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gbAiUbq-9JtC for <spasm@ietfa.amsl.com>; Sat, 1 Oct 2022 02:31:52 -0700 (PDT)
Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80052.outbound.protection.outlook.com [40.107.8.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB9F7C14F721 for <spasm@ietf.org>; Sat, 1 Oct 2022 02:31:51 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=gbZwl9FtgMVZrYv8LtQ3qFHMjirP4JxqYB9Qego/4HQrjakG+j/YAhYJI4YdCoHpOmeuZn1qSddoV6ekZ6P4vapU+HmbKsjIIwXms26yON/3izxnT4qu8GfqJ3UIUKTHu50TNOjkJoNpR473rxFSAbD5f/U1Ze/kmeGPuZ1ttpzDM5Hafni5rZh+0sr7UU1JF3gluNxfDHTZirjifVgHBnBnrmi5LdUR5mke6DKvoVyG4iwpV7vciQEkHEXXxRvTVSOpiLsb8zTNFnAhkv1WTectjo31mqka7MSdasjmn7fko564Q+OIjyRdhQ9pqTSN5xTBhC0Rf1cMwWTWuQmQ0A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=SaB8mN9VeLRuLBQgJcyu/8uLn28TU4vZSEAeAuBARlo=; b=kN/tye9lKxGe+pIB3Rw10l9kBrR+ernqCt8X11VUd2FhuVA0rMa3SavonRFeYsCFJBv8yGjmhozfD9BroUir56hKW5zFs8KMh0RLuVZMrm1ZHAKZuQ8J9ArP6xOrmAo+0/Zumu2TTb/vPZhhXBaz03MGoPb8LjLST99EGDIOqAHUvPav7szv4X63zngo1hDhfkDAfqlE7ICbciMPODZxy2GVhFGMvINUtoi8/5o4boWvBgEvii9vuBjasXWxsuGGlXPnVW3Th/dNoHCum8B9Jwpfzbz+criv1ueBFZrGMpMkFPx6dglBZXccUpuKDjd80d/bKLS7CJ0AT0TsL2UfFQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=siemens.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=SaB8mN9VeLRuLBQgJcyu/8uLn28TU4vZSEAeAuBARlo=; b=HGGnBtWdYumJnFe5DFdLU99qossoOvCwKm6vHiB0NEiY4vA1mNQW6QWI52vrW/B0FtJ5KYCUfCxcbpVAb3SMIKj/shMxaA4Fyh8687LzBUhNnrRttaG+Dtocu0DJvSfECBVPuyK3oLdTvE9IBDB0z6IJF14Iy4eNYIa173YSi+wEW7yB65h3EkTDrcpe8MGYjWVeZyjGYFY95c5fXdmIftwGsZP/9MBpLVt34HbusKhLrOiyGvxxlev5+55nRrcMaE/PQJrPZyPokzauD6C1FzUsMfC5tG4UcP7WW8hjoPnFJUIkWtjDt49aYvXJeOg2F8v7osJK4almd9JjyXzAAA==
Received: from DB9PR10MB5884.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:398::20) by AM7PR10MB3462.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:13d::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5676.23; Sat, 1 Oct 2022 09:31:47 +0000
Received: from DB9PR10MB5884.EURPRD10.PROD.OUTLOOK.COM ([fe80::2df6:48ea:5e2d:b055]) by DB9PR10MB5884.EURPRD10.PROD.OUTLOOK.COM ([fe80::2df6:48ea:5e2d:b055%5]) with mapi id 15.20.5676.023; Sat, 1 Oct 2022 09:31:47 +0000
From: "von Oheimb, David" <david.von.oheimb@siemens.com>
To: "spasm@ietf.org" <spasm@ietf.org>, "mcr+ietf@sandelman.ca" <mcr+ietf@sandelman.ca>
Thread-Topic: [lamps] Fixed the RFC 8994 / ACP Subject Alternative Name example - Re: struggling with CSRAttrs
Thread-Index: AQHY1Xig4U7/UqphF06/oHmv6Vsxmg==
Date: Sat, 01 Oct 2022 09:31:47 +0000
Message-ID: <cf6f2e271a0ecda5875e38a10c7455fcf03ddeb6.camel@siemens.com>
References: <12352.1657505901@localhost> <ada963a796ca3fafb42a29751020ff4326fd2a1e.camel@von-Oheimb.de> <563732.1659120308@dooku> <36c409c2-ab92-4ec2-6f1e-235652a243d9@siemens.com> <3758.1659557693@localhost> <399c3a1e-ee28-cc85-6e6a-cee210e70753@siemens.com> <DM6PR14MB2186188B8CFA66967F52A081929F9@DM6PR14MB2186.namprd14.prod.outlook.com> <19f4388a-49e1-d14e-2463-e9f0e181c2ea@siemens.com> <997117.1664573368@dooku>
In-Reply-To: <997117.1664573368@dooku>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Evolution 3.38.3-1
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=siemens.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: DB9PR10MB5884:EE_|AM7PR10MB3462:EE_
x-ms-office365-filtering-correlation-id: 6d10ab27-4281-49b7-0adb-08daa38fc2ee
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9PR10MB5884.EURPRD10.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230022)(4636009)(39860400002)(396003)(136003)(366004)(346002)(376002)(451199015)(478600001)(6486002)(316002)(110136005)(86362001)(91956017)(64756008)(66946007)(66556008)(66476007)(76116006)(66446008)(8676002)(41300700001)(38070700005)(6506007)(6512007)(8936002)(4744005)(82960400001)(5660300002)(38100700002)(26005)(2616005)(122000001)(36756003)(186003)(71200400001)(2906002); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: +cRniBbd4bocAxwYlQw4vofH5UdKF+bNsj07+wRlakLa/UzrdO3uZEPktQdiOOnpI3uxINKJ2/PuqYODkkYqJZCX1KsQJdpDO3TRYSmKWf3gWMe2dLnIizcGYxF1w4o5GzHVzzrTvKLJogtpRW4d6UxHMhDK5thCznMr9o39mek5x/tNtF6TdIIYu4PtRm/QJCFtgAmjcP7aM/s49/DXaSvxCc9Ptnwk4RwubmEwDIfFoP5YrFuHJVvgDiiovPLmC0MVwMZMJbxW+LSpypXLW0YOom7K5vwqkHFt7kVyv1Xg26X8fpaNKKcQOiFx4Ase/wyDRulufHFLAHRwwBohL8tF4J8qaZZx2ZTyVMyXAr23L82CKaKiWw89emU56E0dWiVgVci7rzIGvrgFlIFRiw1Pmisfd3dkXCLdk4fnsZ6VZFAqWU9Ff0NQwsMx7dWKU/PjDHg3PUWO6B6aMGzFzhmgNYilP3Y2L0adDe9ywyya2zkiXSLka2yzhI4U6ZV9uRB3PmAdWbb23uGyKy4VSGCkG2RyCihaPj/vnUCTIAFYKF8yx/PqPzJTE6A0mcEa48f1hYeuVIR6cBLTd62YStQZNu6TiBuk4MXYVqv8M50qSoD6nOfrtaiKBHOI9I/thDEXwL5SqSoheYQOfrE+EC3GNtOD78KGygxix3PXS+lpYCf009+4jyhN4id+Lq+jRIXxjwhbdO8XgVgKcUI/ENfIpKSQLIUeLmK28uvkaA1ov0YmywbGiRuN2XK73vaBzy1lQgMHiMYmCzo/VcIoGa8iRg6GstikRop4/2AdbKXhuXu3w/jNC47CnZ8vz9OYlT4v1zXDJAhZ7hTrCUV23e+gO4h4+HydDrOLoEObwEcVp/UpphUSKrVP5R4C4Lu0dMKx9vyouafllPh/ipqxt8zlhkiygLkBxkQr1da4bD6XBZx2NUlSQbPE1hAFsh9s1EfqA6GeXJS1G1WSMR2V7hF/5Kzg23IAHhb3IxXq+OEWEgw3laze28RGJ61C/u83ORIriG49yffxdgBqTf0KR+ifj30goCEP5jZfrd6xXZLtfdEvaq+ehWSyTAOM6eD0MszaEFeYwzEDUjkFw6/fryACVcfmRzUQI8/pmbBRqSWy//4XSBYB5GgKcSgWjDHgSnCOtsEtnp0afejU3Xbi22NrY09ybR6NpXXC369rnRKsviQrbsFxs1SMm72G5C0kwavBUoIOH8eULQTZpjdVwiuLgbjCs8iAtbgtg3ozibqhU980lS2+LEeJD+YfbPferBeSHam5M7lXZAA3NMoD0nAk901UW3ztGl9wCgtH6Mg81p7Zfy+BYzc6+/haZIgR7HDzm14S87JpnBW7NzwA9yRAromBN3JuK6G3lL6SZybqjT9wTbeCvv1l2P+TExC9hysWubnYHyI6ZjN8MrSSsO4aZTyl3W4WaQSL3dBMAegy9pser8ZvfN/oeWLx/nR/mDdgBnYaaTOOw5g1drva2fcsbbe1+bYECegITXfn5sT2Pa1dVaHgJcX774LS/2g9CDhxnLKdQ73+kGpXzZXB+eO9FBS/5pZDjWlmMoXr356RFxE6BoKXDBPMZGZs1bhBuwsNIKhpQv9GvTtn/FpL5r0csAmsu0yA5tSMY1y4lSo=
Content-Type: multipart/alternative; boundary="_000_cf6f2e271a0ecda5875e38a10c7455fcf03ddeb6camelsiemenscom_"
MIME-Version: 1.0
X-OriginatorOrg: siemens.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DB9PR10MB5884.EURPRD10.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 6d10ab27-4281-49b7-0adb-08daa38fc2ee
X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Oct 2022 09:31:47.2220 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: vCipszJrR3QTAJz23bSnrJCUFLV5W0qsQc8lpNrncOJMmMP6klPjSAUgpcjqHMtQbBkl0OOuI6YOhY+RJJmBczp7X6HiarSlXxanSnuC+6U=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7PR10MB3462
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/78kKl5ioZRd46ZhuCUdvs-PitmQ>
Subject: Re: [lamps] Fixed the RFC 8994 / ACP Subject Alternative Name example - Re: struggling with CSRAttrs
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 01 Oct 2022 09:31:56 -0000

On Fri, 2022-09-30 at 23:29 +0200, Michael Richardson wrote:

David von Oheimb <David.von.Oheimb@siemens.com<mailto:David.von.Oheimb@siemens.com>> wrote:
    > I've added to our repo a little script and config using OpenSSL for
    > producing the extended and corrected example ASN.1 encoding:

I saw that, but it generates a CSR, not a CSRattributes :-)

sure, but CSRattrs are designed to have essentially the same structure as CSRs.
And unfortunately I don't have a better tool.

David

v2.46.0 | Report a Bug | By Email | System Status