Re: [Technical Errata Reported] RFC2634 (6563)
David von Oheimb <[email protected]> Thu, 29 Apr 2021 10:33:47 +0200
| Newsgroups | gmane.ietf.smime |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format. --===============0553121885464222746== Content-Type: multipart/alternative; boundary="------------F7ED7B1E1D250324EF00782C" Content-Language: en-US This is a multi-part message in MIME format. --------------F7ED7B1E1D250324EF00782C Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit HI Megan, thank you for your response. Indeed the report was meant for RFC 5035 (by mistake I had not updated the RFC number from 2643, for which just before I had filed a strongly related report). The corrected errata report is now at https://www.rfc-editor.org/errata/eid6566. Regards, David On 28.04.21 22:57, Megan Ferguson wrote: > Hi David, > > It looks like this text is from RFC 5035 (https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.rfc-editor.org%2Frfc%2Frfc5035.txt&data=04%7C01%7C3fc86e35-ce5e-4719-beb0-5253a4681d60%40ad011.siemens.com%7C53c91a479bda4ba0153e08d90a883d24%7C38ae3bcd95794fd4addab42e1495d55a%7C1%7C0%7C637552402958167199%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=93dCWRI%2BJ598Hvxt%2BovfATRqlT5QHwyOrCLIcuJfUAc%3D&reserved=0) not RFC 2643. > > We have deleted EID 6563 assuming this is the case. Please resubmit using the correct RFC number. (Unfortunately, that is one thing I can’t change from my end.) > > Please let us know if we can be of further assistance. > > Thank you. > > RFC Editor/mf > >> On Apr 28, 2021, at 2:10 PM, RFC Errata System <[email protected]> wrote: >> >> The following errata report has been submitted for RFC2634, >> "Enhanced Security Services for S/MIME". >> >> -------------------------------------- >> You may review the report below and at: >> https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.rfc-editor.org%2Ferrata%2Feid6563&data=04%7C01%7C3fc86e35-ce5e-4719-beb0-5253a4681d60%40ad011.siemens.com%7C53c91a479bda4ba0153e08d90a883d24%7C38ae3bcd95794fd4addab42e1495d55a%7C1%7C0%7C637552402958167199%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=bczwGB3kuvF4347dUJyhcXqCkByWQ%2BCj8sP4Yyep14I%3D&reserved=0 >> >> -------------------------------------- >> Type: Technical >> Reported by: David von Oheimb <[email protected]> >> >> Section: 3 >> >> Original Text >> ------------- >> >> certs >> contains the list of certificates that are to be used in >> validating the message. The first certificate identified in the >> sequence of certificate identifiers MUST be the certificate used >> to verify the signature. The encoding of the ESSCertIDv2 for this >> certificate SHOULD include the issuerSerial field. If other >> constraints ensure that issuerAndSerialNumber will be present in >> the SignerInfo, the issuerSerial field MAY be omitted. The >> certificate identified is used during the signature verification >> process. If the hash of the certificate does not match the >> certificate used to verify the signature, the signature MUST be >> considered invalid. >> >> If more than one certificate is present, subsequent certificates >> limit the set of certificates that are used during validation. >> >> Corrected Text >> -------------- >> >> certs >> contains the list of certificates that are to be used in >> validating the message. It MUST contain at least one element. >> The first certificate identified in the >> sequence of certificate identifiers MUST be the certificate used >> to verify the signature. The encoding of the ESSCertIDv2 for this >> certificate SHOULD include the issuerSerial field. If other >> constraints ensure that issuerAndSerialNumber will be present in >> the SignerInfo, the issuerSerial field MAY be omitted. The >> certificate identified is used during the signature verification >> process. If the hash of the certificate does not match the >> certificate used to verify the signature, the signature MUST be >> considered invalid. >> >> If more than one certificate identifier is present in the sequence of ESSCertIDv2s, >> all certificates referenced there MUST be part of the signature validation chain. >> >> Notes >> ----- >> Some aspects of the 'certs' field of a SigningCertificateV2 attribute: >> >> SigningCertificateV2 ::= SEQUENCE { >> certs SEQUENCE OF ESSCertIDv2, >> policies SEQUENCE OF PolicyInformation OPTIONAL >> } >> >> described in the sentences quoted above are rather vague. >> This lead to major confusion and wrong implementations. >> As meanwhile has been clarified, they should be re-phrased; >> see suggested new version above. >> >> (One may further mandate/clarify that the certificate identifiers must be given in the same order >> as they are expected in the validation chain, but I think this is not important because >> the order should not play a critical role and will be determined by the validation chain anyway.) >> >> Instructions: >> ------------- >> This erratum is currently posted as "Reported". If necessary, please >> use "Reply All" to discuss whether it should be verified or >> rejected. When a decision is reached, the verifying party >> can log in to change the status and edit the report, if necessary. >> >> -------------------------------------- >> RFC2634 (draft-ietf-smime-ess-12) >> -------------------------------------- >> Title : Enhanced Security Services for S/MIME >> Publication Date : June 1999 >> Author(s) : P. Hoffman, Ed. >> Category : PROPOSED STANDARD >> Source : S/MIME Mail Security >> Area : Security >> Stream : IETF >> Verifying Party : IESG >> --------------F7ED7B1E1D250324EF00782C Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 PGh0bWw+CiAgPGhlYWQ+CiAgICA8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNv bnRlbnQ9InRleHQvaHRtbDsgY2hhcnNldD1VVEYtOCI+CiAgPC9oZWFkPgogIDxib2R5Pgog ICAgPHA+SEkgTWVnYW4sPC9wPgogICAgPHA+dGhhbmsgeW91IGZvciB5b3VyIHJlc3BvbnNl Ljxicj4KICAgICAgSW5kZWVkIHRoZSByZXBvcnQgd2FzIG1lYW50IGZvciBSRkMgNTAzNSAo YnkgbWlzdGFrZSBJIGhhZCBub3QKICAgICAgdXBkYXRlZCB0aGUgUkZDIG51bWJlciBmcm9t IDI2NDMsIGZvciB3aGljaCBqdXN0IGJlZm9yZSBJIGhhZAogICAgICBmaWxlZCBhIHN0cm9u Z2x5IHJlbGF0ZWQgcmVwb3J0KS48L3A+CiAgICA8cD5UaGUgY29ycmVjdGVkIGVycmF0YSBy ZXBvcnQgaXMgbm93IGF0IDxhIG1vei1kby1ub3Qtc2VuZD0idHJ1ZSIKICAgICAgICBocmVm PSJodHRwczovL3d3dy5yZmMtZWRpdG9yLm9yZy9lcnJhdGEvZWlkNjU2NiI+aHR0cHM6Ly93 d3cucmZjLWVkaXRvci5vcmcvZXJyYXRhL2VpZDY1NjY8L2E+LjwvcD4KICAgIDxwPlJlZ2Fy ZHMsPC9wPgogICAgPHA+wqDCoMKgIERhdmlkPGJyPgogICAgPC9wPgogICAgPGRpdiBjbGFz cz0ibW96LWNpdGUtcHJlZml4Ij5PbiAyOC4wNC4yMSAyMjo1NywgTWVnYW4gRmVyZ3Vzb24K ICAgICAgd3JvdGU6PGJyPgogICAgPC9kaXY+CiAgICA8YmxvY2txdW90ZSB0eXBlPSJjaXRl IgogICAgICBjaXRlPSJtaWQ6N0U2MDUxQ0MtMTFBQS00QjM5LUJFMEUtNTc0MDhERDk5OEZD QGFtc2wuY29tIj4KICAgICAgPHByZSBjbGFzcz0ibW96LXF1b3RlLXByZSIgd3JhcD0iIj5I aSBEYXZpZCwKCkl0IGxvb2tzIGxpa2UgdGhpcyB0ZXh0IGlzIGZyb20gUkZDIDUwMzUgKDxh IGNsYXNzPSJtb3otdHh0LWxpbmstZnJlZXRleHQiIGhyZWY9Imh0dHBzOi8vZXVyMDEuc2Fm ZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5y ZmMtZWRpdG9yLm9yZyUyRnJmYyUyRnJmYzUwMzUudHh0JmFtcDthbXA7ZGF0YT0wNCU3QzAx JTdDM2ZjODZlMzUtY2U1ZS00NzE5LWJlYjAtNTI1M2E0NjgxZDYwJTQwYWQwMTEuc2llbWVu cy5jb20lN0M1M2M5MWE0NzliZGE0YmEwMTUzZTA4ZDkwYTg4M2QyNCU3QzM4YWUzYmNkOTU3 OTRmZDRhZGRhYjQyZTE0OTVkNTVhJTdDMSU3QzAlN0M2Mzc1NTI0MDI5NTgxNjcxOTklN0NV bmtub3duJTdDVFdGcGJHWnNiM2Q4ZXlKV0lqb2lNQzR3TGpBd01EQWlMQ0pRSWpvaVYybHVN eklpTENKQlRpSTZJazFoYVd3aUxDSlhWQ0k2TW4wJTNEJTdDMzAwMCZhbXA7YW1wO3NkYXRh PTkzZENXUkklMkJKNTk4SHZ4dCUyQm92ZkFUUnFsVDVRSHd5T3JDTEljdUpmVUFjJTNEJmFt cDthbXA7cmVzZXJ2ZWQ9MCI+aHR0cHM6Ly9ldXIwMS5zYWZlbGlua3MucHJvdGVjdGlvbi5v dXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGd3d3LnJmYy1lZGl0b3Iub3JnJTJGcmZj JTJGcmZjNTAzNS50eHQmYW1wO2FtcDtkYXRhPTA0JTdDMDElN0MzZmM4NmUzNS1jZTVlLTQ3 MTktYmViMC01MjUzYTQ2ODFkNjAlNDBhZDAxMS5zaWVtZW5zLmNvbSU3QzUzYzkxYTQ3OWJk YTRiYTAxNTNlMDhkOTBhODgzZDI0JTdDMzhhZTNiY2Q5NTc5NGZkNGFkZGFiNDJlMTQ5NWQ1 NWElN0MxJTdDMCU3QzYzNzU1MjQwMjk1ODE2NzE5OSU3Q1Vua25vd24lN0NUV0ZwYkdac2Iz ZDhleUpXSWpvaU1DNHdMakF3TURBaUxDSlFJam9pVjJsdU16SWlMQ0pCVGlJNklrMWhhV3dp TENKWFZDSTZNbjAlM0QlN0MzMDAwJmFtcDthbXA7c2RhdGE9OTNkQ1dSSSUyQko1OThIdnh0 JTJCb3ZmQVRScWxUNVFId3lPckNMSWN1SmZVQWMlM0QmYW1wO2FtcDtyZXNlcnZlZD0wPC9h Pikgbm90IFJGQyAyNjQzLgoKV2UgaGF2ZSBkZWxldGVkIEVJRCA2NTYzIGFzc3VtaW5nIHRo aXMgaXMgdGhlIGNhc2UuICBQbGVhc2UgcmVzdWJtaXQgdXNpbmcgdGhlIGNvcnJlY3QgUkZD IG51bWJlci4gIChVbmZvcnR1bmF0ZWx5LCB0aGF0IGlzIG9uZSB0aGluZyBJIGNhbuKAmXQg Y2hhbmdlIGZyb20gbXkgZW5kLikKClBsZWFzZSBsZXQgdXMga25vdyBpZiB3ZSBjYW4gYmUg b2YgZnVydGhlciBhc3Npc3RhbmNlLgoKVGhhbmsgeW91LgoKUkZDIEVkaXRvci9tZgoKPC9w cmU+CiAgICAgIDxibG9ja3F1b3RlIHR5cGU9ImNpdGUiPgogICAgICAgIDxwcmUgY2xhc3M9 Im1vei1xdW90ZS1wcmUiIHdyYXA9IiI+T24gQXByIDI4LCAyMDIxLCBhdCAyOjEwIFBNLCBS RkMgRXJyYXRhIFN5c3RlbSA8YSBjbGFzcz0ibW96LXR4dC1saW5rLXJmYzIzOTZFIiBocmVm PSJtYWlsdG86cmZjLWVkaXRvckByZmMtZWRpdG9yLm9yZyI+Jmx0O3JmYy1lZGl0b3JAcmZj LWVkaXRvci5vcmcmZ3Q7PC9hPiB3cm90ZToKClRoZSBmb2xsb3dpbmcgZXJyYXRhIHJlcG9y dCBoYXMgYmVlbiBzdWJtaXR0ZWQgZm9yIFJGQzI2MzQsCiJFbmhhbmNlZCBTZWN1cml0eSBT ZXJ2aWNlcyBmb3IgUy9NSU1FIi4KCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tCllvdSBtYXkgcmV2aWV3IHRoZSByZXBvcnQgYmVsb3cgYW5kIGF0Ogo8YSBjbGFz cz0ibW96LXR4dC1saW5rLWZyZWV0ZXh0IiBocmVmPSJodHRwczovL2V1cjAxLnNhZmVsaW5r cy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZ3d3cucmZjLWVk aXRvci5vcmclMkZlcnJhdGElMkZlaWQ2NTYzJmFtcDthbXA7ZGF0YT0wNCU3QzAxJTdDM2Zj ODZlMzUtY2U1ZS00NzE5LWJlYjAtNTI1M2E0NjgxZDYwJTQwYWQwMTEuc2llbWVucy5jb20l N0M1M2M5MWE0NzliZGE0YmEwMTUzZTA4ZDkwYTg4M2QyNCU3QzM4YWUzYmNkOTU3OTRmZDRh ZGRhYjQyZTE0OTVkNTVhJTdDMSU3QzAlN0M2Mzc1NTI0MDI5NTgxNjcxOTklN0NVbmtub3du JTdDVFdGcGJHWnNiM2Q4ZXlKV0lqb2lNQzR3TGpBd01EQWlMQ0pRSWpvaVYybHVNeklpTENK QlRpSTZJazFoYVd3aUxDSlhWQ0k2TW4wJTNEJTdDMzAwMCZhbXA7YW1wO3NkYXRhPWJjendH QjNrdXZGNDM0N2RVSnloY1hxQ2tCeVdRJTJCQ2o4c1A0WXllcDE0SSUzRCZhbXA7YW1wO3Jl c2VydmVkPTAiPmh0dHBzOi8vZXVyMDEuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5j b20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5yZmMtZWRpdG9yLm9yZyUyRmVycmF0YSUyRmVp ZDY1NjMmYW1wO2FtcDtkYXRhPTA0JTdDMDElN0MzZmM4NmUzNS1jZTVlLTQ3MTktYmViMC01 MjUzYTQ2ODFkNjAlNDBhZDAxMS5zaWVtZW5zLmNvbSU3QzUzYzkxYTQ3OWJkYTRiYTAxNTNl MDhkOTBhODgzZDI0JTdDMzhhZTNiY2Q5NTc5NGZkNGFkZGFiNDJlMTQ5NWQ1NWElN0MxJTdD MCU3QzYzNzU1MjQwMjk1ODE2NzE5OSU3Q1Vua25vd24lN0NUV0ZwYkdac2IzZDhleUpXSWpv aU1DNHdMakF3TURBaUxDSlFJam9pVjJsdU16SWlMQ0pCVGlJNklrMWhhV3dpTENKWFZDSTZN bjAlM0QlN0MzMDAwJmFtcDthbXA7c2RhdGE9YmN6d0dCM2t1dkY0MzQ3ZFVKeWhjWHFDa0J5 V1ElMkJDajhzUDRZeWVwMTRJJTNEJmFtcDthbXA7cmVzZXJ2ZWQ9MDwvYT4KCi0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tClR5cGU6IFRlY2huaWNhbApSZXBvcnRl ZCBieTogRGF2aWQgdm9uIE9oZWltYiA8YSBjbGFzcz0ibW96LXR4dC1saW5rLXJmYzIzOTZF IiBocmVmPSJtYWlsdG86RGF2aWQudm9uLk9oZWltYkBzaWVtZW5zLmNvbSI+Jmx0O0Rhdmlk LnZvbi5PaGVpbWJAc2llbWVucy5jb20mZ3Q7PC9hPgoKU2VjdGlvbjogMwoKT3JpZ2luYWwg VGV4dAotLS0tLS0tLS0tLS0tCgogIGNlcnRzCiAgICAgY29udGFpbnMgdGhlIGxpc3Qgb2Yg Y2VydGlmaWNhdGVzIHRoYXQgYXJlIHRvIGJlIHVzZWQgaW4KICAgICB2YWxpZGF0aW5nIHRo ZSBtZXNzYWdlLiAgVGhlIGZpcnN0IGNlcnRpZmljYXRlIGlkZW50aWZpZWQgaW4gdGhlCiAg ICAgc2VxdWVuY2Ugb2YgY2VydGlmaWNhdGUgaWRlbnRpZmllcnMgTVVTVCBiZSB0aGUgY2Vy dGlmaWNhdGUgdXNlZAogICAgIHRvIHZlcmlmeSB0aGUgc2lnbmF0dXJlLiAgVGhlIGVuY29k aW5nIG9mIHRoZSBFU1NDZXJ0SUR2MiBmb3IgdGhpcwogICAgIGNlcnRpZmljYXRlIFNIT1VM RCBpbmNsdWRlIHRoZSBpc3N1ZXJTZXJpYWwgZmllbGQuICBJZiBvdGhlcgogICAgIGNvbnN0 cmFpbnRzIGVuc3VyZSB0aGF0IGlzc3VlckFuZFNlcmlhbE51bWJlciB3aWxsIGJlIHByZXNl bnQgaW4KICAgICB0aGUgU2lnbmVySW5mbywgdGhlIGlzc3VlclNlcmlhbCBmaWVsZCBNQVkg YmUgb21pdHRlZC4gIFRoZQogICAgIGNlcnRpZmljYXRlIGlkZW50aWZpZWQgaXMgdXNlZCBk dXJpbmcgdGhlIHNpZ25hdHVyZSB2ZXJpZmljYXRpb24KICAgICBwcm9jZXNzLiAgSWYgdGhl IGhhc2ggb2YgdGhlIGNlcnRpZmljYXRlIGRvZXMgbm90IG1hdGNoIHRoZQogICAgIGNlcnRp ZmljYXRlIHVzZWQgdG8gdmVyaWZ5IHRoZSBzaWduYXR1cmUsIHRoZSBzaWduYXR1cmUgTVVT VCBiZQogICAgIGNvbnNpZGVyZWQgaW52YWxpZC4KCiAgICAgSWYgbW9yZSB0aGFuIG9uZSBj ZXJ0aWZpY2F0ZSBpcyBwcmVzZW50LCBzdWJzZXF1ZW50IGNlcnRpZmljYXRlcwogICAgIGxp bWl0IHRoZSBzZXQgb2YgY2VydGlmaWNhdGVzIHRoYXQgYXJlIHVzZWQgZHVyaW5nIHZhbGlk YXRpb24uCgpDb3JyZWN0ZWQgVGV4dAotLS0tLS0tLS0tLS0tLQoKICBjZXJ0cwogICAgIGNv bnRhaW5zIHRoZSBsaXN0IG9mIGNlcnRpZmljYXRlcyB0aGF0IGFyZSB0byBiZSB1c2VkIGlu CiAgICAgdmFsaWRhdGluZyB0aGUgbWVzc2FnZS4gSXQgTVVTVCBjb250YWluIGF0IGxlYXN0 IG9uZSBlbGVtZW50LgogICAgIFRoZSBmaXJzdCBjZXJ0aWZpY2F0ZSBpZGVudGlmaWVkIGlu IHRoZQogICAgIHNlcXVlbmNlIG9mIGNlcnRpZmljYXRlIGlkZW50aWZpZXJzIE1VU1QgYmUg dGhlIGNlcnRpZmljYXRlIHVzZWQKICAgICB0byB2ZXJpZnkgdGhlIHNpZ25hdHVyZS4gIFRo ZSBlbmNvZGluZyBvZiB0aGUgRVNTQ2VydElEdjIgZm9yIHRoaXMKICAgICBjZXJ0aWZpY2F0 ZSBTSE9VTEQgaW5jbHVkZSB0aGUgaXNzdWVyU2VyaWFsIGZpZWxkLiAgSWYgb3RoZXIKICAg ICBjb25zdHJhaW50cyBlbnN1cmUgdGhhdCBpc3N1ZXJBbmRTZXJpYWxOdW1iZXIgd2lsbCBi ZSBwcmVzZW50IGluCiAgICAgdGhlIFNpZ25lckluZm8sIHRoZSBpc3N1ZXJTZXJpYWwgZmll bGQgTUFZIGJlIG9taXR0ZWQuICBUaGUKICAgICBjZXJ0aWZpY2F0ZSBpZGVudGlmaWVkIGlz IHVzZWQgZHVyaW5nIHRoZSBzaWduYXR1cmUgdmVyaWZpY2F0aW9uCiAgICAgcHJvY2Vzcy4g IElmIHRoZSBoYXNoIG9mIHRoZSBjZXJ0aWZpY2F0ZSBkb2VzIG5vdCBtYXRjaCB0aGUKICAg ICBjZXJ0aWZpY2F0ZSB1c2VkIHRvIHZlcmlmeSB0aGUgc2lnbmF0dXJlLCB0aGUgc2lnbmF0 dXJlIE1VU1QgYmUKICAgICBjb25zaWRlcmVkIGludmFsaWQuCgogICAgIElmIG1vcmUgdGhh biBvbmUgY2VydGlmaWNhdGUgaWRlbnRpZmllciBpcyBwcmVzZW50IGluIHRoZSBzZXF1ZW5j ZSBvZiBFU1NDZXJ0SUR2MnMsCiAgICAgYWxsIGNlcnRpZmljYXRlcyByZWZlcmVuY2VkIHRo ZXJlIE1VU1QgYmUgcGFydCBvZiB0aGUgc2lnbmF0dXJlIHZhbGlkYXRpb24gY2hhaW4uCgpO b3RlcwotLS0tLQpTb21lIGFzcGVjdHMgb2YgdGhlICdjZXJ0cycgZmllbGQgb2YgYSBTaWdu aW5nQ2VydGlmaWNhdGVWMiBhdHRyaWJ1dGU6CgogIFNpZ25pbmdDZXJ0aWZpY2F0ZVYyIDo6 PSAgU0VRVUVOQ0UgewogICAgICBjZXJ0cyAgICAgICAgU0VRVUVOQ0UgT0YgRVNTQ2VydElE djIsCiAgICAgIHBvbGljaWVzICAgICBTRVFVRU5DRSBPRiBQb2xpY3lJbmZvcm1hdGlvbiBP UFRJT05BTAogIH0KCmRlc2NyaWJlZCBpbiB0aGUgc2VudGVuY2VzIHF1b3RlZCBhYm92ZSBh cmUgcmF0aGVyIHZhZ3VlLgpUaGlzIGxlYWQgdG8gbWFqb3IgY29uZnVzaW9uIGFuZCB3cm9u ZyBpbXBsZW1lbnRhdGlvbnMuCkFzIG1lYW53aGlsZSBoYXMgYmVlbiBjbGFyaWZpZWQsIHRo ZXkgc2hvdWxkIGJlIHJlLXBocmFzZWQ7CnNlZSBzdWdnZXN0ZWQgbmV3IHZlcnNpb24gYWJv dmUuCgooT25lIG1heSBmdXJ0aGVyIG1hbmRhdGUvY2xhcmlmeSB0aGF0IHRoZSBjZXJ0aWZp Y2F0ZSBpZGVudGlmaWVycyBtdXN0IGJlIGdpdmVuIGluIHRoZSBzYW1lIG9yZGVyCmFzIHRo ZXkgYXJlIGV4cGVjdGVkIGluIHRoZSB2YWxpZGF0aW9uIGNoYWluLCBidXQgSSB0aGluayB0 aGlzIGlzIG5vdCBpbXBvcnRhbnQgYmVjYXVzZQp0aGUgb3JkZXIgc2hvdWxkIG5vdCBwbGF5 IGEgY3JpdGljYWwgcm9sZSBhbmQgd2lsbCBiZSBkZXRlcm1pbmVkIGJ5IHRoZSB2YWxpZGF0 aW9uIGNoYWluIGFueXdheS4pCgpJbnN0cnVjdGlvbnM6Ci0tLS0tLS0tLS0tLS0KVGhpcyBl cnJhdHVtIGlzIGN1cnJlbnRseSBwb3N0ZWQgYXMgIlJlcG9ydGVkIi4gSWYgbmVjZXNzYXJ5 LCBwbGVhc2UKdXNlICJSZXBseSBBbGwiIHRvIGRpc2N1c3Mgd2hldGhlciBpdCBzaG91bGQg YmUgdmVyaWZpZWQgb3IKcmVqZWN0ZWQuIFdoZW4gYSBkZWNpc2lvbiBpcyByZWFjaGVkLCB0 aGUgdmVyaWZ5aW5nIHBhcnR5ICAKY2FuIGxvZyBpbiB0byBjaGFuZ2UgdGhlIHN0YXR1cyBh bmQgZWRpdCB0aGUgcmVwb3J0LCBpZiBuZWNlc3NhcnkuIAoKLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0KUkZDMjYzNCAoZHJhZnQtaWV0Zi1zbWltZS1lc3MtMTIp Ci0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tClRpdGxlICAgICAgICAg ICAgICAgOiBFbmhhbmNlZCBTZWN1cml0eSBTZXJ2aWNlcyBmb3IgUy9NSU1FClB1YmxpY2F0 aW9uIERhdGUgICAgOiBKdW5lIDE5OTkKQXV0aG9yKHMpICAgICAgICAgICA6IFAuIEhvZmZt YW4sIEVkLgpDYXRlZ29yeSAgICAgICAgICAgIDogUFJPUE9TRUQgU1RBTkRBUkQKU291cmNl ICAgICAgICAgICAgICA6IFMvTUlNRSBNYWlsIFNlY3VyaXR5CkFyZWEgICAgICAgICAgICAg ICAgOiBTZWN1cml0eQpTdHJlYW0gICAgICAgICAgICAgIDogSUVURgpWZXJpZnlpbmcgUGFy dHkgICAgIDogSUVTRwoKPC9wcmU+CiAgICAgIDwvYmxvY2txdW90ZT4KICAgICAgPHByZSBj bGFzcz0ibW96LXF1b3RlLXByZSIgd3JhcD0iIj4KPC9wcmU+CiAgICA8L2Jsb2NrcXVvdGU+ CiAgPC9ib2R5Pgo8L2h0bWw+Cg== --------------F7ED7B1E1D250324EF00782C-- --===============0553121885464222746== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ smime mailing list [email protected] https://www.ietf.org/mailman/listinfo/smime --===============0553121885464222746==--