draft-ietf-lamps-rfc7030est-clarify-08.txt | draft-ietf-lamps-rfc7030est-clarify-09.txt | |||
---|---|---|---|---|
LAMPS Working Group M. Richardson | LAMPS Working Group M. Richardson | |||
Internet-Draft Sandelman Software Works | Internet-Draft Sandelman Software Works | |||
Updates: 7030 (if approved) T. Werner | Updates: 7030 (if approved) T. Werner | |||
Intended status: Standards Track Siemens | Intended status: Standards Track Siemens | |||
Expires: January 7, 2021 W. Pan | Expires: January 13, 2021 W. Pan | |||
Huawei Technologies | Huawei Technologies | |||
July 06, 2020 | July 12, 2020 | |||
Clarification of Enrollment over Secure Transport (EST): transfer | Clarification of Enrollment over Secure Transport (EST): transfer | |||
encodings and ASN.1 | encodings and ASN.1 | |||
draft-ietf-lamps-rfc7030est-clarify-08 | draft-ietf-lamps-rfc7030est-clarify-09 | |||
Abstract | Abstract | |||
This document updates RFC7030: Enrollment over Secure Transport (EST) | This document updates RFC7030: Enrollment over Secure Transport (EST) | |||
to resolve some errata that were reported, and which has proven to | to resolve some errata that were reported, and which has proven to | |||
cause interoperability issues when RFC7030 was extended. | cause interoperability issues when RFC7030 was extended. | |||
This document deprecates the specification of "Content-Transfer- | This document deprecates the specification of "Content-Transfer- | |||
Encoding" headers for EST endpoints. This document fixes some | Encoding" headers for EST endpoints. This document fixes some | |||
syntactical errors in ASN.1 that were presented. | syntactical errors in ASN.1 that were presented. | |||
skipping to change at page 1, line 40 ¶ | skipping to change at page 1, line 40 ¶ | |||
Internet-Drafts are working documents of the Internet Engineering | Internet-Drafts are working documents of the Internet Engineering | |||
Task Force (IETF). Note that other groups may also distribute | Task Force (IETF). Note that other groups may also distribute | |||
working documents as Internet-Drafts. The list of current Internet- | working documents as Internet-Drafts. The list of current Internet- | |||
Drafts is at https://datatracker.ietf.org/drafts/current/. | Drafts is at https://datatracker.ietf.org/drafts/current/. | |||
Internet-Drafts are draft documents valid for a maximum of six months | Internet-Drafts are draft documents valid for a maximum of six months | |||
and may be updated, replaced, or obsoleted by other documents at any | and may be updated, replaced, or obsoleted by other documents at any | |||
time. It is inappropriate to use Internet-Drafts as reference | time. It is inappropriate to use Internet-Drafts as reference | |||
material or to cite them other than as "work in progress." | material or to cite them other than as "work in progress." | |||
This Internet-Draft will expire on January 7, 2021. | This Internet-Draft will expire on January 13, 2021. | |||
Copyright Notice | Copyright Notice | |||
Copyright (c) 2020 IETF Trust and the persons identified as the | Copyright (c) 2020 IETF Trust and the persons identified as the | |||
document authors. All rights reserved. | document authors. All rights reserved. | |||
This document is subject to BCP 78 and the IETF Trust's Legal | This document is subject to BCP 78 and the IETF Trust's Legal | |||
Provisions Relating to IETF Documents | Provisions Relating to IETF Documents | |||
(https://trustee.ietf.org/license-info) in effect on the date of | (https://trustee.ietf.org/license-info) in effect on the date of | |||
publication of this document. Please review these documents | publication of this document. Please review these documents | |||
skipping to change at page 9, line 10 ¶ | skipping to change at page 9, line 10 ¶ | |||
6. Privacy Considerations | 6. Privacy Considerations | |||
This document does not disclose any additional identities to either | This document does not disclose any additional identities to either | |||
active or passive observer would see with [RFC7030]. | active or passive observer would see with [RFC7030]. | |||
7. Security Considerations | 7. Security Considerations | |||
This document clarifies an existing security mechanism. It does not | This document clarifies an existing security mechanism. It does not | |||
create any new protocol mechanism. | create any new protocol mechanism. | |||
All security considerations from [RFC7030] applies also for the | ||||
clarifications described in this document. | ||||
8. IANA Considerations | 8. IANA Considerations | |||
The ASN.1 module in Appendix A of this document makes use of object | The ASN.1 module in Appendix A of this document makes use of object | |||
identifiers (OIDs). This document requests that IANA register an OID | identifiers (OIDs). This document requests that IANA register an OID | |||
in the SMI Security for PKIX Arc in the Module identifiers subarc | in the SMI Security for PKIX Arc in the Module identifiers subarc | |||
(1.3.6.1.5.5.7.0) for the ASN.1 module. The OID for the Asymmetric | (1.3.6.1.5.5.7.0) for the ASN.1 module. The OID for the Asymmetric | |||
Decryption Key Identifier (1.2.840.113549.1.9.16.2.54) was previously | Decryption Key Identifier (1.2.840.113549.1.9.16.2.54) was previously | |||
defined in [RFC7030]. | defined in [RFC7030]. | |||
IANA is requested to update the "Reference" column for the Asymmetric | IANA is requested to update the "Reference" column for the Asymmetric | |||
skipping to change at page 13, line 45 ¶ | skipping to change at page 13, line 45 ¶ | |||
AttrSet ATTRIBUTE ::= { ... } | AttrSet ATTRIBUTE ::= { ... } | |||
-- Asymmetric Decrypt Key Identifier Attribute | -- Asymmetric Decrypt Key Identifier Attribute | |||
aa-asymmDecryptKeyID ATTRIBUTE ::= | aa-asymmDecryptKeyID ATTRIBUTE ::= | |||
{ TYPE AsymmetricDecryptKeyIdentifier | { TYPE AsymmetricDecryptKeyIdentifier | |||
IDENTIFIED BY id-aa-asymmDecryptKeyID } | IDENTIFIED BY id-aa-asymmDecryptKeyID } | |||
id-aa-asymmDecryptKeyID OBJECT IDENTIFIER ::= { iso(1) member-body(2) | id-aa-asymmDecryptKeyID OBJECT IDENTIFIER ::= { iso(1) member-body(2) | |||
us(840) rsadsi(113549) pkcs(1) pkcs9(9) smime(16) aa(2) 54 } | us(840) rsadsi(113549) pkcs(1) pkcs-9(9) smime(16) aa(2) 54 } | |||
AsymmetricDecryptKeyIdentifier ::= OCTET STRING | AsymmetricDecryptKeyIdentifier ::= OCTET STRING | |||
END | END | |||
Authors' Addresses | Authors' Addresses | |||
Michael Richardson | Michael Richardson | |||
Sandelman Software Works | Sandelman Software Works | |||
End of changes. 6 change blocks. | ||||
5 lines changed or deleted | 8 lines changed or added | |||
This html diff was produced by rfcdiff 1.47. The latest version is available from http://tools.ietf.org/tools/rfcdiff/ |