Re: [lamps] is the CSRattr ASN.1 broken or not ... Re: New Version Notification for draft-richardson-lamps-rfc7030-csrattrs-02.txt

[Michael Richardson <[e-mail]>]

Sean Turner <[e-mail]> wrote:
    >>> ExtensionRequest ::= Extensions
    >>> }
    >>> } Extensions  ::=  SEQUENCE SIZE (1..MAX) OF Extension
    >>> }
    >>> } Extension  ::=  SEQUENCE  {
    >>> }        extnID      OBJECT IDENTIFIER,
    >>> }        critical    BOOLEAN DEFAULT FALSE,
    >>> }        extnValue   OCTET STRING
    >>> }                    -- contains the DER encoding of an ASN.1 value
    >>> }                    -- corresponding to the extension type identified
    >>> }                    -- by extnID
    >>> }        }

    > This value is needed because that’s how extensionRequest is defined (see RFC 2985).

    > In other words, the SET would include the OID and a value that is a
    > value for an encoding of extensionRequest that includes SEQ OF SEQ {cid
    > macAddress, extnValue OCTET STRING (some value)}.

    > This assumes that macAddress was meant to be an extension instead of a
    > naming attribute. If it’s a naming attribute, then it’s the wrong
    > attribute entirely in the example.

Would it be easier if we used the otherName example from RFC8994?
I'll dig that details out of my repo and post later today.
The doodle poll is complete, and I've set the meeting for Wed. April 6.

--
]               Never tell me the odds!                 | ipv6 mesh networks [
]   Michael Richardson, Sandelman Software Works        |    IoT architect   [
]     [e-mail]  http://www.sandelman.ca/        |   ruby on rails    [