Re: [lamps] CSRATTRS specifying the SAN

[Michael Richardson <[e-mail]>]

Eliot Lear <[e-mail]> wrote:
    > On 09.06.21 22:15, Michael Richardson wrote:
    >> I found the ASN.1 code in section 4.5.2 beyond my understanding, so I
    >> muddled through, since fortunately, there was an example.
    >>
    >> CsrAttrs ::= SEQUENCE SIZE (0..MAX) OF AttrOrOID AttrOrOID ::= CHOICE
    >> (oid OBJECT IDENTIFIER, attribute Attribute } Attribute {
    >> ATTRIBUTE:IOSet } ::= SEQUENCE { type ATTRIBUTE.&id({IOSet}), values
    >> SET SIZE(1..MAX) OF ATTRIBUTE.&Type({IOSet}{@type}) }


    > Forgive me, I have indeed misread. the line.  I do still have one
    > question.

    > I want to understand how to specify the fields that the CA/RA would
    > want filled in by the requestor.  For example, how would you say,
    > “please provide a SAN of the following form..." such as a serial#?

So, just to pick a nit... the serialNumber= attribute is part of the SubjectName.
(not SAN).  But, it's all just OIDs as attributes.

You'd make a sequence
      SEQ [ OID-X520SerialNumber, SET["JABA1234"]]

and then you'd add this to your sequence of stuff you want.
I think that "JABA1234" would be of type printableString.

--
]               Never tell me the odds!                 | ipv6 mesh networks [
]   Michael Richardson, Sandelman Software Works        | network architect  [
]     [e-mail]  http://www.sandelman.ca/        |   ruby on rails    [