Page MenuHomeFreeBSD

add an entry for X.509 certificate subjAltName otherName field
ClosedPublic

Authored by rmacklem on Aug 29 2020, 2:38 AM.
Tags
None
Referenced Files
Unknown Object (File)
Mar 18 2024, 4:48 PM
Unknown Object (File)
Feb 23 2024, 1:52 PM
Unknown Object (File)
Dec 20 2023, 12:14 AM
Unknown Object (File)
Dec 8 2023, 3:54 PM
Unknown Object (File)
Dec 3 2023, 11:55 PM
Unknown Object (File)
Nov 19 2023, 11:03 AM
Unknown Object (File)
Nov 17 2023, 5:34 PM
Unknown Object (File)
Nov 9 2023, 4:47 AM

Details

Summary

The otherName component of the subjAltName field in an X.509
certificate needs to be identified by an Internet OID.

This entry creates 1.3.6.1.4.1.2238.1.1 as a subtree for these.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

I figure this file is as good a place to document the
subtree.

How does this patch look?
--> I intend to use 1.3.6.1.4.1.2238.1.1.1 for "user@domain"

subjAltName otherName entries.

Added a REVISION entry similar to other MIB files.

Sorry about the delay, I have bounced this upstairs, to make sure I dont overlook any security implications from this.

gordon added inline comments.
FREEBSD-MIB.txt
51 ↗(On Diff #76366)

Per my email, I'd like to see better documentation to show this is meant for NFS otherwise it's not going to be clear over time why this is here.

Although it is not really NFS specific, NFS is probably the
only use case that will happen in my lifetime, so define
it as NFS specific and comment w.r.t. where it is handled.

If a non-NFS use case shows up, a different # can be assigned.

Modify the entry to be NFS specific and add a comment
w.r.t. where it is handled, per inline comment.

This revision is now accepted and ready to land.Sep 3 2020, 3:28 AM