Re: [lamps] Orie Steele's No Objection on draft-ietf-lamps-rfc5019bis-08: (with COMMENT)

[Orie Steele <[e-mail]>]

I'm not asking for any change, I am just noting that the signature block
was missing.

If that causes the block to become invalid, I am not enough of an expert to
answer...
If this were another language, I might expect an "undefined term" error.

If the missing section is not needed (which seems to be the case), this
suggested change might make it clearer that the extract is partial:

194        Provided for convenience here, *a partial extract of the
relevant *
195        ASN.1 structure corresponding to the OCSPRequest with the
relevant
196        CertID as defined in [RFC6960]:

Then no other changes would be needed.

Either way, this was just a comment.

OS


On Fri, Apr 12, 2024 at 12:24 PM Russ Housley <[e-mail]> wrote:

> Orie:
>
> I am not sure what you are asking here.  Yes, the extract of ASN.1 is
> incomplete from RFC 6960.  Are you just asking for it to be more complete,
> even though this profile does not include the part that is not duplicated?
>
> Russ
>
>
> On Apr 12, 2024, at 12:45 PM, Orie Steele via Datatracker <
> [e-mail]> wrote:
>
> ### Section 3.1.1 missing Signature
>
> ```
> 194        Provided for convenience here, but unchanged from [RFC6960], the
> 195        ASN.1 structure corresponding to the OCSPRequest with the
> relevant
> 196        CertID is:
> ```
>
> https://datatracker.ietf.org/doc/html/rfc6960#section-4.1.1 contains:
>
> ```
>   Signature       ::=     SEQUENCE {
>       signatureAlgorithm      AlgorithmIdentifier,
>       signature               BIT STRING,
>       certs               [0] EXPLICIT SEQUENCE OF Certificate
>   OPTIONAL}
> ```
>
> But this section does not.
>
> I am not sure if this impacts "copy paste / validation", but it is a
> "change"
> that I noticed.
>
> Later sections note that unsigned requests are acceptable, perhaps this is
> the
> reason for the ommision?
>
>
>

-- 


ORIE STEELE
Chief Technology Officer
www.transmute.industries

<https://transmute.industries>