--- 1/draft-ietf-lamps-rfc7030est-clarify-01.txt 2020-03-05 18:13:57.997189622 -0800 +++ 2/draft-ietf-lamps-rfc7030est-clarify-02.txt 2020-03-05 18:13:58.025190338 -0800 @@ -2,21 +2,21 @@ LAMPS Working Group M. Richardson Internet-Draft Sandelman Software Works Intended status: Standards Track T. Werner Expires: September 6, 2020 Siemens W. Pan Huawei Technologies March 05, 2020 Clarification of Enrollment over Secure Transport (EST): transfer encodings and ASN.1 - draft-ietf-lamps-rfc7030est-clarify-01 + draft-ietf-lamps-rfc7030est-clarify-02 Abstract This document updates RFC7030: Enrollment over Secure Transport (EST) to resolve some errata that was reported, and which has proven to have interoperability when RFC7030 has been extended. This document deprecates the specification of "Content-Transfer- Encoding" headers for EST endpoints, providing a way to do this in an upward compatible way. This document fixes some syntactical errors @@ -63,24 +63,25 @@ 5. Clarification of ASN.1 for Certificate Attribute set. . . . . 4 5.1. CSR Attributes Response . . . . . . . . . . . . . . . . . 4 6. Clarification of error messages for certificate enrollment operations . . . . . . . . . . . . . . . . . . . . . . . . . 6 6.1. Updating section 4.2.3: Simple Enroll and Re-enroll Response . . . . . . . . . . . . . . . . . . . . . . . . 6 6.2. Updating section 4.4.2: Server-Side Key Generation Response . . . . . . . . . . . . . . . . . . . . . . . . 6 7. Privacy Considerations . . . . . . . . . . . . . . . . . . . 6 8. Security Considerations . . . . . . . . . . . . . . . . . . . 7 - 9. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . 7 - 10. References . . . . . . . . . . . . . . . . . . . . . . . . . 7 - 10.1. Normative References . . . . . . . . . . . . . . . . . . 7 - 10.2. Informative References . . . . . . . . . . . . . . . . . 8 + 9. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 7 + 10. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . 7 + 11. References . . . . . . . . . . . . . . . . . . . . . . . . . 7 + 11.1. Normative References . . . . . . . . . . . . . . . . . . 7 + 11.2. Informative References . . . . . . . . . . . . . . . . . 8 Appendix A. ASN.1 Module . . . . . . . . . . . . . . . . . . . . 9 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 10 1. Introduction [RFC7030] defines the Enrollment over Secure Transport, or EST protocol. This specification defines a number of HTTP end points for certificate enrollment and management. The details of the @@ -271,44 +272,46 @@ Servers MAY use the "text/plain" content-type [RFC2046] for human-readable errors. 7. Privacy Considerations This document does not disclose any additional identifies to either active or passive observer would see with [RFC7030]. 8. Security Considerations - This document clarifies an existing security mechanism. # IANA - Considerations + This document clarifies an existing security mechanism. It does not + create any new protocol mechanism. + +9. IANA Considerations The ASN.1 module in Appendix A of this doucment makes use of object identifiers (OIDs). This document requests that IANA register an OID in the SMI Security for PKIX Arc in the Module identifiers subarc (1.3.6.1.5.5.7.0) for the ASN.1 module. The OID for the Asymmetric Decryption Key Identifier (1.2.840.113549.1.9.16.2.54) was previously defined in [RFC7030]. IANA is requested to update the "Reference" column for the Asymmetric Decryption Key Identifier attribute to also include a reference to this doducment. -9. Acknowledgements +10. Acknowledgements This work was supported by the Huawei Technologies. The ASN.1 Module was assembled by Russ Housley and formatted by Sean Turner. -10. References +11. References -10.1. Normative References +11.1. Normative References [I-D.ietf-anima-bootstrapping-keyinfra] Pritikin, M., Richardson, M., Eckert, T., Behringer, M., and K. Watsen, "Bootstrapping Remote Secure Key Infrastructures (BRSKI)", draft-ietf-anima-bootstrapping- keyinfra-37 (work in progress), February 2020. [RFC2045] Freed, N. and N. Borenstein, "Multipurpose Internet Mail Extensions (MIME) Part One: Format of Internet Message Bodies", RFC 2045, DOI 10.17487/RFC2045, November 1996, @@ -346,21 +349,21 @@ [X683] ITU-T, "Information technology - Abstract Syntax Notation One: Parameterization of ASN.1 Specifications.", ISO/ IEC 8824-2:2002, 2002. [X690] ITU-T, "Information technology - ASN.1 encoding Rules: Specification of Basic Encoding Rules (BER), Canonical Encoding Rules (CER) and Distinguished Encoding Rules (DER).", ISO/IEC 8825-1:2002, 2002. -10.2. Informative References +11.2. Informative References [errata4384] "EST errata 4384: ASN.1 encoding error", n.d., . [errata5107] "EST errata 5107: use Content-Transfer-Encoding", n.d., . [errata5108]