[lamps] Allocation of OIDs for CRL update retrieval (draft-ietf-lamps-cmp-updates-13)
Russ Housley <housley@vigilsec.com> Wed, 10 November 2021 21:25 UTC
Return-Path: <housley@vigilsec.com>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5749C3A141F for <spasm@ietfa.amsl.com>; Wed, 10 Nov 2021 13:25:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FfwIVmW8DR9U for <spasm@ietfa.amsl.com>; Wed, 10 Nov 2021 13:25:50 -0800 (PST)
Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1EBA63A142E for <spasm@ietf.org>; Wed, 10 Nov 2021 13:25:50 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 91FAF300C0D for <spasm@ietf.org>; Wed, 10 Nov 2021 16:25:51 -0500 (EST)
X-Virus-Scanned: amavisd-new at mail.smeinc.net
Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 9kX7AzQ8UMGA for <spasm@ietf.org>; Wed, 10 Nov 2021 16:25:49 -0500 (EST)
Received: from [192.168.1.159] (pool-141-156-161-153.washdc.fios.verizon.net [141.156.161.153]) by mail.smeinc.net (Postfix) with ESMTPSA id 48DD7300B25; Wed, 10 Nov 2021 16:25:49 -0500 (EST)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.21\))
From: Russ Housley <housley@vigilsec.com>
In-Reply-To: <AM0PR10MB24180E40A20D83DB1BB5BDA6FE929@AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM>
Date: Wed, 10 Nov 2021 16:25:46 -0500
Cc: LAMPS WG <spasm@ietf.org>, "david.von.oheimb@siemens.com" <david.von.oheimb@siemens.com>, "Brockhaus, Hendrik" <hendrik.brockhaus@siemens.com>, John Gray <John.Gray@entrust.com>
Content-Transfer-Encoding: quoted-printable
Message-Id: <0E478455-1218-4D54-A256-44B9E318D251@vigilsec.com>
References: <AM0PR10MB24180E40A20D83DB1BB5BDA6FE929@AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM>
To: "Roman D. Danyliw" <rdd@cert.org>
X-Mailer: Apple Mail (2.3445.104.21)
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/i63jUieev5gssGlZU29jyNvcGR4>
Subject: [lamps] Allocation of OIDs for CRL update retrieval (draft-ietf-lamps-cmp-updates-13)
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Nov 2021 21:25:58 -0000
Roman: As discussed on Monday, the LAMPS WG would like to get early (permanent) allocation of two OIDs from IANA. The relevant part of draft-ietf-lamps-cmp-updates-13 is quoted below. The OID need to be allocated in SMI Security for PKIX CMP Information Types (1.3.6.1.5.5.7.4). (https://www.iana.org/assignments/smi-numbers/smi-numbers.xml#smi-numbers-1.3.6.1.5.5.7.4) Thanks, Russ = = = = = = = = = 2.16. New Section 5.3.19.17 - CRL update retrieval The following subsection introduces the PKI general message using id- it-crlStatusList and id-it-crls. Details are specified in the Lightweight CMP Profile Section 4.3 [I-D.ietf-lamps-lightweight-cmp-profile]. Insert this section after new Section 5.3.19.16: 5.3.19.17. CRL update retrieval This MAY be used by the client to get new CRLs, specifying the source of the CRLs and the thisUpdate value of the latest CRL it already has, if available. A CRL source is given either by a DistributionPointName or the GeneralNames of the issuing CA. The server shall provide only those CRLs that are more recent than the ones indicated by the client. GenMsg: {id-it TBD1}, SEQUENCE SIZE (1..MAX) OF CRLStatus GenRep: {id-it TBD2}, SEQUENCE SIZE (1..MAX) OF CertificateList | < absent > CRLSource ::= CHOICE { dpn [0] DistributionPointName, issuer [1] GeneralNames } CRLStatus ::= SEQUENCE { source CRLSource, thisUpdate Time OPTIONAL }
- [lamps] Changes to pre-registered OIDs Brockhaus, Hendrik
- Re: [lamps] Changes to pre-registered OIDs Russ Housley
- Re: [lamps] Changes to pre-registered OIDs Brockhaus, Hendrik
- [lamps] Allocation of OIDs for CRL update retriev… Russ Housley
- Re: [lamps] Allocation of OIDs for CRL update ret… Brockhaus, Hendrik
- Re: [lamps] Allocation of OIDs for CRL update ret… Roman Danyliw
- Re: [lamps] Allocation of OIDs for CRL update ret… Russ Housley
- Re: [lamps] Allocation of OIDs for CRL update ret… Roman Danyliw