Re: Review of draft-ietf-krb-wg-pkinit-alg-agility-06

On 09/04/2012 08:22 PM, Jeffrey Hutzelman wrote:
>> I need someone to validate the ASN.1 module in Appendix A.

asn1c accepts it, with one proviso.  For the sake of its output model,
asn1c insists that all type names be unique.  The module in the draft
extends the AuthPack and DHRepInfo sequences, using the same names as in
RFC 4556.  To get asn1c to accept the module, those types have to be
renamed.

I was hoping to verify that asn1c actually produces encodings consistent
with our implementation of the spec, but I ran into a weird
inconsistency with asn1c's encoding of PrincipalName (from RFC 4120) and
need to work through that.

>> I would also like to hear from anyone who has implemented this
>> specification or is planning to do so, and particularly from anyone who
>> was able to verify the test vectors in section 7.

I didn't write it personally, but we have an implementation of this spec
in MIT krb5.  I'll need to follow up (hopefully today, maybe tomorrow)
on whether we can verify the test vectors.

_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg