| < draft-housley-ers-asn1-modules-00.txt | draft-housley-ers-asn1-modules-01.txt > | |||
|---|---|---|---|---|
| Network Working Group R. Housley | Network Working Group R. Housley | |||
| Internet-Draft Vigil Security | Internet-Draft Vigil Security | |||
| Intended status: Informational C. Wallace | Intended status: Informational C. Wallace | |||
| Expires: 19 August 2021 Red Hound Software | Expires: 9 September 2021 Red Hound Software | |||
| 15 February 2021 | 8 March 2021 | |||
| New ASN.1 Modules for the Evidence Record Syntax (ERS) | New ASN.1 Modules for the Evidence Record Syntax (ERS) | |||
| draft-housley-ers-asn1-modules-00 | draft-housley-ers-asn1-modules-01 | |||
| Abstract | Abstract | |||
| The Evidence Record Syntax (ERS) and the conventions for including | The Evidence Record Syntax (ERS) and the conventions for including | |||
| these evidence record in the Server-Based Certificate Validation | these evidence record in the Server-based Certificate Validation | |||
| Protocol (SCVP) are expressed using ASN.1. This document updates | Protocol (SCVP) are expressed using ASN.1. This document offers | |||
| those ASN.1 modules to conform to the 2002 version of ASN.1 and | alternatives for the ASN.1 modules to conform to the 2002 version of | |||
| employ the conventions adopted in RFC 5911, RFC 5912, and RFC 6268. | ASN.1 and employ the conventions adopted in RFC 5911, RFC 5912, and | |||
| There are no bits-on-the-wire changes to any of the formats; this is | RFC 6268. There are no bits-on-the-wire changes to any of the | |||
| simply a change to the ASN.1 syntax. | formats; this is simply a change to the ASN.1 syntax. | |||
| Status of This Memo | Status of This Memo | |||
| This Internet-Draft is submitted in full conformance with the | This Internet-Draft is submitted in full conformance with the | |||
| provisions of BCP 78 and BCP 79. | provisions of BCP 78 and BCP 79. | |||
| Internet-Drafts are working documents of the Internet Engineering | Internet-Drafts are working documents of the Internet Engineering | |||
| Task Force (IETF). Note that other groups may also distribute | Task Force (IETF). Note that other groups may also distribute | |||
| working documents as Internet-Drafts. The list of current Internet- | working documents as Internet-Drafts. The list of current Internet- | |||
| Drafts is at https://datatracker.ietf.org/drafts/current/. | Drafts is at https://datatracker.ietf.org/drafts/current/. | |||
| Internet-Drafts are draft documents valid for a maximum of six months | Internet-Drafts are draft documents valid for a maximum of six months | |||
| and may be updated, replaced, or obsoleted by other documents at any | and may be updated, replaced, or obsoleted by other documents at any | |||
| time. It is inappropriate to use Internet-Drafts as reference | time. It is inappropriate to use Internet-Drafts as reference | |||
| material or to cite them other than as "work in progress." | material or to cite them other than as "work in progress." | |||
| This Internet-Draft will expire on 19 August 2021. | This Internet-Draft will expire on 9 September 2021. | |||
| Copyright Notice | Copyright Notice | |||
| Copyright (c) 2021 IETF Trust and the persons identified as the | Copyright (c) 2021 IETF Trust and the persons identified as the | |||
| document authors. All rights reserved. | document authors. All rights reserved. | |||
| This document is subject to BCP 78 and the IETF Trust's Legal | This document is subject to BCP 78 and the IETF Trust's Legal | |||
| Provisions Relating to IETF Documents (https://trustee.ietf.org/ | Provisions Relating to IETF Documents (https://trustee.ietf.org/ | |||
| license-info) in effect on the date of publication of this document. | license-info) in effect on the date of publication of this document. | |||
| Please review these documents carefully, as they describe your rights | Please review these documents carefully, as they describe your rights | |||
| skipping to change at page 2, line 40 ¶ | skipping to change at page 2, line 40 ¶ | |||
| modules to assist in that goal. | modules to assist in that goal. | |||
| The Evidence Record Syntax (ERS) [RFC4998] provides two ASN.1 | The Evidence Record Syntax (ERS) [RFC4998] provides two ASN.1 | |||
| modules, one using the 1988 syntax [OLD-ASN1], which has been | modules, one using the 1988 syntax [OLD-ASN1], which has been | |||
| deprecated by the ITU-T, and another one using the 2002 syntax | deprecated by the ITU-T, and another one using the 2002 syntax | |||
| [NEW-ASN1], which continued to be maintained and enhanced. This | [NEW-ASN1], which continued to be maintained and enhanced. This | |||
| document provides an alternate ASN.1 module that follows the | document provides an alternate ASN.1 module that follows the | |||
| conventions established in [RFC5911], [RFC5912], and [RFC6268]. | conventions established in [RFC5911], [RFC5912], and [RFC6268]. | |||
| In addition, [RFC5276] specifies the mechanism for conveying Evidence | In addition, [RFC5276] specifies the mechanism for conveying Evidence | |||
| Records in the Server-Based Certificate Validation Protocol (SCVP) | Records in the Server-based Certificate Validation Protocol (SCVP) | |||
| [RFC5055]. There is only one ASN.1 module in [RFC5276], and it uses | [RFC5055]. There is only one ASN.1 module in [RFC5276], and it uses | |||
| the 1988 syntax [OLD-ASN1]. This document provides an alternate | the 1988 syntax [OLD-ASN1]. This document provides an alternate | |||
| ASN.1 module using the 2002 syntax [NEW-ASN1] and follows the | ASN.1 module using the 2002 syntax [NEW-ASN1] and follows the | |||
| conventions established in [RFC5911], [RFC5912], and [RFC6268]. Note | conventions established in [RFC5911], [RFC5912], and [RFC6268]. Note | |||
| that [RFC5912] already includes an alternate ASN.1 module for SCVP | that [RFC5912] already includes an alternate ASN.1 module for SCVP | |||
| [RFC5055]. | [RFC5055]. | |||
| The alternate ASN.1 modules in this document get some of their | The original ASN.1 modules get some of their definitions from places | |||
| definitions from places different than the modules in [RFC4998] and | outside the RFC series. Some of the referenced definitions are | |||
| [RFC5276]. The idea is that these alternate ASN.1 modules, when | somewhat difficult to find. The alternate ASN.1 modules offered in | |||
| combined with the modules in [RFC5911], [RFC5912], and [RFC6268] can | this document stand on their own when combined with the modules in | |||
| stand on their own. These modules do not import definitions from | [RFC5911], [RFC5912], and [RFC6268]. | |||
| anywhere else, some of which are somewhat difficult to find. | ||||
| The alternate ASN.1 modules produce the same bits-on-the wire as the | ||||
| original ones. | ||||
| The alternate ASN.1 modules are informative; the original ones are | ||||
| normative. | ||||
| 2. ASN.1 Module for RFC 4998 | 2. ASN.1 Module for RFC 4998 | |||
| <CODE BEGINS> | <CODE BEGINS> | |||
| ERS-2021 | ERS-2021 | |||
| { iso(1) identified-organization(3) dod(6) internet(1) | { iso(1) identified-organization(3) dod(6) internet(1) | |||
| security(5) mechanisms(5) ltans(11) id-mod(0) | security(5) mechanisms(5) ltans(11) id-mod(0) | |||
| id-mod-ers(1) id-mod-ers-v2(2) } | id-mod-ers(1) id-mod-ers-v2(2) } | |||
| DEFINITIONS IMPLICIT TAGS ::= | DEFINITIONS IMPLICIT TAGS ::= | |||
| End of changes. 6 change blocks. | ||||
| 17 lines changed or deleted | 22 lines changed or added | |||
This html diff was produced by rfcdiff 1.48. The latest version is available from http://tools.ietf.org/tools/rfcdiff/ | ||||