Re: [lamps] CMP Update of CertificationRequest

"Brockhaus, Hendrik" <hendrik.brockhaus@siemens.com> Tue, 25 May 2021 06:45 UTC

Return-Path: <hendrik.brockhaus@siemens.com>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3EC9A3A1764 for <spasm@ietfa.amsl.com>; Mon, 24 May 2021 23:45:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=siemens.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d_U2v-duvE4j for <spasm@ietfa.amsl.com>; Mon, 24 May 2021 23:45:00 -0700 (PDT)
Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40040.outbound.protection.outlook.com [40.107.4.40]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 32DA13A1762 for <spasm@ietf.org>; Mon, 24 May 2021 23:45:00 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=cosb4/8TcDIcrchdN4YO+R6A3JDg+cXxM2VE/ndzOoowaAauqzJKhrDDqrgYK7zu7QTWbvIPy2vnL1XLwhUkX+a1n0A/UfKg17rr3Rfvseuhu7juxgw+j031dGj3XFm2eWW7wbFwqX/hDZLSMDF+LkFD/cJO7XQ50lyGv1GLJ8O3yhJ0FdrVvKUU4KHt4Eq9fHuHNlKEJeOnwk1XGRJ2OjXrNGGt1D/6FRnSzW3pLkInXPJAtQyXShy7bCkUrSETXdOPVV/kA7ZAwbsER8J0OJD4QPabBq5PKXRuAtNYcCFjHUU+e2mTl501FFUBrOl0f2Ctkdodsv72raKa0HyPTw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OWSun46ACqsEStVl8BA2SYl3+BBJw1+4CfBMAIhC3Yk=; b=cG8L2e1pkn6q1tXoRwupmpBceelg3tWXgarMfEF2V1RV38TLO5fdQxgrr6MqFLXavzvkZlVnJjpz0GvWZyrrJdw7EI4TExkcbmNWyGzGIvIpy0SylZqUteZOsVDIKTysiiGWulfg6QXNngcmujqitBo5AFCzPp7cte/QYdca7Bb4h6LA07DKEHo7s65KoHOBZTpED91NT1xbW5eQEw6O6ogIMsMKbq4LYmPCN5ZRz3asgtDHS6wND+P1I7Dg8MkDORshLJH1W6ttIpZQgPDqElIuAtVkwG89AISR7BdVUm0BIfici9wBBTEns1P84zzD1/6ni7q6V6GayZoFcCilPQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=siemens.onmicrosoft.com; s=selector1-siemens-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OWSun46ACqsEStVl8BA2SYl3+BBJw1+4CfBMAIhC3Yk=; b=cuhKSxtcyZtVafZanYgcL3yLhyJbLx3L7ZHPBheEeRsHpnF8+5GZ1FL1e0/aDaZ4MMWT4WtQGmDEXi4PCevlnZLXwKpcUeJZR6EwKq4iphiCPJXnhcx5DM6cTX3E8Izh41U7ksz0GH2qlQcGDurzr5Wc0BfpgB8KqSqpCKm6xwo=
Received: from AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:208:dd::17) by AM9PR10MB4184.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:1f5::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4150.26; Tue, 25 May 2021 06:44:58 +0000
Received: from AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM ([fe80::8563:833c:2122:ae5c]) by AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM ([fe80::8563:833c:2122:ae5c%7]) with mapi id 15.20.4150.027; Tue, 25 May 2021 06:44:58 +0000
From: "Brockhaus, Hendrik" <hendrik.brockhaus@siemens.com>
To: Russ Housley <housley@vigilsec.com>
CC: LAMPS WG <spasm@ietf.org>
Thread-Topic: [lamps] CMP Update of CertificationRequest
Thread-Index: AQHXUAi0M5wR8FkyHU+zAT7w9uu3NqrzuDjg
Date: Tue, 25 May 2021 06:44:58 +0000
Message-ID: <AM0PR10MB2418FFBED75094786AE58E91FE259@AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM>
References: <25C71A2D-CA3E-44F4-B8C6-00049DB2C097@vigilsec.com>
In-Reply-To: <25C71A2D-CA3E-44F4-B8C6-00049DB2C097@vigilsec.com>
Accept-Language: de-DE, en-US
Content-Language: de-DE
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_Enabled=true; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_SetDate=2021-05-25T06:44:56Z; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_Method=Standard; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_Name=restricted-default; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_SiteId=38ae3bcd-9579-4fd4-adda-b42e1495d55a; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_ActionId=02938a64-7292-4158-9075-f192b80ea33d; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_ContentBits=0
document_confidentiality: Restricted
authentication-results: vigilsec.com; dkim=none (message not signed) header.d=none;vigilsec.com; dmarc=none action=none header.from=siemens.com;
x-originating-ip: [147.161.169.19]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: a2cebbaa-5161-45cb-45a8-08d91f489d06
x-ms-traffictypediagnostic: AM9PR10MB4184:
x-microsoft-antispam-prvs: <AM9PR10MB4184B156311E3B5C2DB6A291FE259@AM9PR10MB4184.EURPRD10.PROD.OUTLOOK.COM>
x-ms-oob-tlc-oobclassifiers: OLM:7691;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(4636009)(136003)(396003)(366004)(346002)(39860400002)(376002)(4744005)(52536014)(86362001)(8936002)(2906002)(4326008)(8676002)(83380400001)(66446008)(186003)(5660300002)(6916009)(33656002)(64756008)(66946007)(15650500001)(38100700002)(122000001)(9686003)(7696005)(71200400001)(6506007)(66476007)(66556008)(316002)(55016002)(76116006)(26005)(478600001); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: 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
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: siemens.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: a2cebbaa-5161-45cb-45a8-08d91f489d06
X-MS-Exchange-CrossTenant-originalarrivaltime: 25 May 2021 06:44:58.0896 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: DP7jgnJJsKPQqD/FSM1JruV9U2MHrrJl591hS5CdeSM1XvQpOPP5w/wEoDMnJibzytkYrE7xwxwDYfYDjcQ2a3WlEtKtKS9i0kHami0p1jA=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM9PR10MB4184
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/kum9wc552aoeqpXMjm5PObZk7f4>
Subject: Re: [lamps] CMP Update of CertificationRequest
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 May 2021 06:45:05 -0000

Russ

I am uncertain, if I got your suggestion right. 

> Von: Spasm <spasm-bounces@ietf.org> Im Auftrag von Russ Housley
> 
> Right now, CertificationRequest is being imported from PKCS#10.  It looks to me
> like CertificationRequest is also defined in RFC 6402. 

Right, the ASN.1 module in RFC 6402 Appendix A. also defines CertificationRequest.

> RFC 6402 is also an update to CMP.

RFC 6402 updates CMC. Why do you think it also updates CMP?

> Since the definition was pulled into the ASN.1 module for that update,
> does it make sense to do the same now?

Do you suggest to import the definition of CertificationRequest from the ASN.1 modules in RFC 6402 instead of RFC 2986? 
Or do you suggest to directly add the new definition to the ASN.1 modules in CMP Updates?

Hendrik