[lamps] Re: I-D Action: draft-ietf-lamps-certdiscovery-04.txt

[Russ Housley <[e-mail]>]

I cannot get the ASN.1 to compile because the use of AlgorithmIdentifier does not align with RFC 5911.

For example, you might define:

    SignatureAlg ::= AlgorithmIdentifier{ SIGNATURE-ALGORITHM, ... }

Russ

> On Oct 29, 2026, at 4:47 PM, [e-mail] wrote:
> 
> Internet-Draft draft-ietf-lamps-certdiscovery-04.txt is now available. It is a
> work item of the Limited Additional Mechanisms for PKIX and SMIME (LAMPS) WG
> of the IETF.
> 
>   Title:   A Mechanism for X.509 Certificate Discovery
>   Authors: Tomofumi Okubo
>            Corey Bonnell
>            John Gray
>            Mike Ounsworth
>            Joe Mandel
>   Name:    draft-ietf-lamps-certdiscovery-04.txt
>   Pages:   13
>   Dates:   2026-10-29
> 
> Abstract:
> 
>   This document specifies a method to discover a referenced X.509
>   certificate associated with the current X.509 certificate.  This
>   enables efficient multi-certificate or fallback certificate handling
>   in protocols.  The objective is threefold: to enhance cryptographic
>   agility, improve operational availability, and accommodate multi-key/
>   certificate usage.  The proposed method aims to maximize
>   compatibility with existing systems and is designed to be legacy-
>   friendly, making it suitable for environments with a mix of legacy
>   and new implementations.  It includes mechanisms to provide a URI
>   from which the referenced X.509 certificate can be retrieved as well
>   as information about the target certificate's signature and public
>   key algorithm, empowering relying parties to make informed decisions
>   on whether to retrieve the Referenced Certificate, and a certificate
>   hash to ensure that the correct certificate was retrieved.
> 
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-ietf-lamps-certdiscovery/
> 
> There is also an HTML version available at:
> https://www.ietf.org/archive/id/draft-ietf-lamps-certdiscovery-04.html
> 
> A diff from the previous version is available at:
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-lamps-certdiscovery-04
> 
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
> 
> 
> _______________________________________________
> Spasm mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]