Re: [lamps] I-D Action: draft-ietf-lamps-samples-03.txt

["David A. Cooper" <[e-mail]>]

On 5/14/21 7:34pm, Daniel Kahn Gillmor wrote:
>  - Add organization and organizational unit to all certificates.

I ran the certificates in draft-ietf-lamps-samples-03 through 
https://github.com/dcooper16/cert_check, and it did not find any 
problems. However, I noticed that the attributes in the issuer and 
subject fields of the certificates are encoded in the reverse order of 
what one would expect. For example, the name of the RSA CA is encoded as:

     SEQUENCE {
       SET {
         SEQUENCE {
           OBJECT IDENTIFIER commonName (2 5 4 3)
           PrintableString 'Sample LAMPS RSA Certification Authority'
           }
         }
       SET {
         SEQUENCE {
           OBJECT IDENTIFIER organizationalUnitName (2 5 4 11)
           PrintableString 'LAMPS WG'
           }
         }
       SET {
         SEQUENCE {
           OBJECT IDENTIFIER organizationName (2 5 4 10)
           PrintableString 'IETF'
           }
         }
       }