[lamps] I-D Action: draft-ietf-lamps-rfc7030-csrattrs-18.txt

[[e-mail]]

Internet-Draft draft-ietf-lamps-rfc7030-csrattrs-18.txt is now available. It
is a work item of the Limited Additional Mechanisms for PKIX and SMIME (LAMPS)
WG of the IETF.

   Title:   Clarification and enhancement of RFC7030 CSR Attributes definition
   Authors: Michael Richardson
            Owen Friel
            Dr. David von Oheimb
            Dan Harkins
   Name:    draft-ietf-lamps-rfc7030-csrattrs-18.txt
   Pages:   24
   Dates:   2025-03-03

Abstract:

   This document updates RFC7030 (EST) and clarifies how the CSR
   Attributes Response can be used by an EST server to specify both CSR
   attribute OIDs and also CSR attribute values, in particular X.509
   extension values, that the server expects the client to include in
   subsequent CSR request.

   The Enrollment over Secure Transport (EST, RFC7030) is ambiguous in
   its specification of the CSR Attributes Response.  This has resulted
   in implementation challenges and implementor confusion.  As a result
   of some of the implementation challenges, it came to light that the
   particular way of that RFC7030 (EST) says to use the CSR attributes
   was not universally agreed upon.

   This document therefore also provides a new straightforward approach:
   using a template for CSR contents that may be partially filled in by
   the server.  This also allows an EST server to specify a subject
   Distinguished Name (DN).

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-lamps-rfc7030-csrattrs/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-lamps-rfc7030-csrattrs-18.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-lamps-rfc7030-csrattrs-18

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts