Skip to content

Commit 2dc29cc

Browse files
committed
Merge remote-tracking branch 'origin/asn1-fixes' into iana-text-change
2 parents 035361e + 3c4f272 commit 2dc29cc

1 file changed

Lines changed: 15 additions & 7 deletions

File tree

draft-ietf-anima-rfc8366bis.md

Lines changed: 15 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -518,11 +518,20 @@ The CMS signing mechanism first defined in {{RFC8366}} continues to be defined h
518518

519519
## CMS Format Voucher Artifact {#cms-voucher}
520520

521-
The IETF evolution of PKCS#7 is CMS {{RFC5652}}.
522-
A CMS-signed Voucher, the default type, contains a ContentInfo
523-
structure with the Voucher Data.
524-
An OID for JSON-encoded Voucher Data is allocated in {{iana-contenttype}}, and
525-
it is to be placed in the '`eContentType`' field in the ContentInfo.
521+
An object identifier (OID) [[ITU-T.X680] for JSON-encoded Voucher Data
522+
is allocated in {{iana-contenttype}}.
523+
This OID is placed in the 'eContentType' field in the EncapsulatedContentInfo:
524+
525+
```
526+
id-smime OBJECT IDENTIFIER ::= { iso(1) member-body(2)
527+
us(840) rsadsi(113549) pkcs(1) pkcs9(9) 16 }
528+
529+
id-ct OBJECT IDENTIFIER ::= { id-smime 1 }
530+
531+
id-ct-animaJSONVoucher OBJECT IDENTIFIER ::= { id-ct 40 }
532+
```
533+
534+
The use of PKCS#7 (cmsVersion=1) is deprecated by this document.
526535

527536
The signing structure is a CMS SignedData structure, as specified by
528537
Section 5.1 of {{RFC5652}}, encoded using ASN.1 Distinguished Encoding
@@ -547,8 +556,7 @@ PKCS7 object (cmsVersion=1). Intermediate systems (such as the
547556
Bootstrapping Remote Secure Key Infrastructures {{RFC8995}} Registrar)
548557
that might need to evaluate the Voucher in flight MUST be prepared for
549558
such an older format.
550-
No signaling of the format version is necessary, as the manufacturer knows the capabilities
551-
of the Pledge and will use an appropriate format Voucher for each
559+
No signaling of the format version is necessary, as the manufacturer knows the capabilities of the Pledge and will use an appropriate format Voucher for each
552560
Pledge.
553561

554562
The CMS structure SHOULD also contain all of the certificates

0 commit comments

Comments
 (0)