On Sat, Apr 04, 2009 at 09:28:02PM -0400, Sean Turner wrote: > I usually try to find the corresponding ITU spec because I think ITU > gives out all of it's ASN.1 modules freely? Anyway, here's a link to > the ITU-T X.841 Spec: > http://www.itu.int/ITU-T/asn1/database/itu-t/x/x841/2000/index.html Thanks. I'm sure the spec needs to be read too, not just the ASN.1 module (it's mostly self-evident, but some types, like LabelAndCertValue, require an explanation). > The one thing that's missing from the module is definitions for security > categories. Some suggested categories were defined in Annex B, but it's > an informative annex so there's no ASN.1 freely available (they wouldn't > allow them in the normative text/module). Those categories are based on > FIPS 188 (the syntax is not the same). > > Note that some of the syntax for labels has made it's way to some > IDs/RFCs notably RFC 2634. Thanks. That's very useful. Nico -- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
