[lamps] CSR attrs in rfc7030-clarify

[Russ Housley <[e-mail]>]

Michael:

I have had an email exchange with someone that implemented EST, and they have pointed out that the aa-asymmDecryptKeyID attribute is not for inclusion in the CSR.  However, when the server does the public/private key pair generation, it is used to name the key to be used top protect the server-generated key.

This leads to two changes in rfc7030-clarify:


In Section 4.1:

OLD:

   AttrSet ATTRIBUTE ::= { aa-asymmDecryptKeyID, ... }

NEW:

   AttrSet ATTRIBUTE ::= { ... }


In Appendix A:

OLD:

  AttrSet ATTRIBUTE ::= { aa-asymmDecrytKeyID, ... }

NEW:

  AttrSet ATTRIBUTE ::= { ... }


Thanks,
  Russ