IETF Logo Mail Archive

Re: [lamps] is the CSRattr ASN.1 broken or not ... Re: New Version Notification for draft-richardson-lamps-rfc7030-csrattrs-02.txt

Russ Housley <housley@vigilsec.com> Tue, 05 April 2022 18:40 UTC

Return-Path: <housley@vigilsec.com>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C33963A0F39 for <spasm@ietfa.amsl.com>; Tue, 5 Apr 2022 11:40:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.907
X-Spam-Level:
X-Spam-Status: No, score=-1.907 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AzSmW6DruGlu for <spasm@ietfa.amsl.com>; Tue, 5 Apr 2022 11:40:04 -0700 (PDT)
Received: from mail3.g24.pair.com (mail3.g24.pair.com [66.39.134.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 01D0F3A0F0E for <spasm@ietf.org>; Tue, 5 Apr 2022 11:40:04 -0700 (PDT)
Received: from mail3.g24.pair.com (localhost [127.0.0.1]) by mail3.g24.pair.com (Postfix) with ESMTP id A09E5A9D59; Tue, 5 Apr 2022 14:40:02 -0400 (EDT)
Received: from [10.0.1.2] (pfs.iad.rg.net [198.180.150.6]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail3.g24.pair.com (Postfix) with ESMTPSA id 7B469AA48F; Tue, 5 Apr 2022 14:40:02 -0400 (EDT)
From: Russ Housley <housley@vigilsec.com>
Message-Id: <A3C15545-8810-482A-A79F-B9350B0CEC51@vigilsec.com>
Content-Type: multipart/signed; boundary="Apple-Mail=_F9045D70-91B5-4072-82BF-C0CABBD28FAF"; protocol="application/pgp-signature"; micalg=pgp-sha256
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.21\))
Date: Tue, 5 Apr 2022 14:40:02 -0400
In-Reply-To: <27441.1649182739@localhost>
Cc: David von Oheimb <David.von.Oheimb@siemens.com>, Sean Turner <sean@sn3rd.com>, Dan Harkins <dharkins@lounge.org>, LAMPS WG <spasm@ietf.org>, Owen Friel <ofriel@cisco.com>
To: Michael Richardson <mcr+ietf@sandelman.ca>
References: <164667410940.12091.15394112688281514126@ietfa.amsl.com> <15416.1646681868@localhost> <D095D84D-9633-44BB-AA6F-440B8BC00F68@sn3rd.com> <5cfb6e20b225da072695a4f13088a8065203ca4e.camel@siemens.com> <27441.1649182739@localhost>
X-Mailer: Apple Mail (2.3445.104.21)
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/pX9IYPfIvubX_I0BwDLfrHUZGUQ>
Subject: Re: [lamps] is the CSRattr ASN.1 broken or not ... Re: New Version Notification for draft-richardson-lamps-rfc7030-csrattrs-02.txt
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Apr 2022 18:40:09 -0000


> On Apr 5, 2022, at 2:18 PM, Michael Richardson <mcr+ietf@sandelman.ca> wrote:
> 
> David von Oheimb <David.von.Oheimb@siemens.com <mailto:David.von.Oheimb@siemens.com>> wrote:
>> As I wrote earlier, the way CSRattrs are defined for EST in RFC
>> 7030 section 4.5.2:
> 
>> CsrAttrs ::= SEQUENCE SIZE (0..MAX) OF AttrOrOID
> 
>> AttrOrOID ::= CHOICE (oid OBJECT IDENTIFIER, attribute Attribute }
> 
>> Attribute { ATTRIBUTE:IOSet } ::= SEQUENCE {
>> type ATTRIBUTE.&id({IOSet}),
>> values SET SIZE(1..MAX) OF ATTRIBUTE.&Type({IOSet}{@type}) }
> 
> Is there another way to express the same concept that would be understandable
> to more people?


I do not know whether the OLD ASN.1 syntax is easier to read for some.  This would be:

   CsrAttrs ::= SEQUENCE SIZE (0..MAX) OF AttrOrOID

   AttrOrOID ::= CHOICE (oid OBJECT IDENTIFIER, attribute Attribute }

   Attribute ::= SEQUENCE {
     type     AttributeType,
     values    SET SIZE(1..MAX) OF AttributeValue }

   AttributeType ::= OBJECT IDENTIFIER

   AttributeValue ::= ANY DEFINED BY AttributeType

Russ

v2.8.7 | Report a Bug | By Email