X.509v3 ASN.1到C数据结构
我正在尝试在C（OpenSSL）中创建X509代理证书请求（ProxyCertInfo扩展RFC3820），但我无法弄清楚应该如何定义ProxyCertInfo的数据结构。 RFC定义ASN.1语言如下：
PKIXproxy88 { iso(1) identified-organization(3) dod(6)
internet(1) security(5) mechanisms(5) pkix(7) id-mod(0)
proxy-cert-extns(25) }
DEFINITIONS EXPLICIT TAGS ::=
BEGIN
-- EXPORTS ALL --
-- IMPORTS NONE --
-- PKIX specific OIDs
id-pkix OBJECT IDENTIFIER ::=
{ iso(1) identified-organization(3)
dod(6) internet(1) security(5) mechanisms(5) pkix(7) }
-- private certificate extensions
id-pe OBJECT IDENTIFIER ::= { id-pkix 1 }
-- Locally defined OIDs
-- The proxy certificate extension
id-pe-proxyCertInfo OBJECT IDENTIFIER ::= { id-pe 14 }
-- Proxy certificate policy languages
id-ppl OBJECT IDENTIFIER ::= { id-pkix 21 }
-- Proxy certificate policies languages defined in
id-ppl-anyLanguage OBJECT IDENTIFIER ::= { id-ppl 0 }
id-ppl-inheritAll OBJECT IDENTIFIER ::= { id-ppl 1 }
id-ppl-independent OBJECT IDENTIFIER ::= { id-ppl 2 }
-- The ProxyCertInfo Extension
ProxyCertInfoExtension ::= SEQUENCE {
pCPathLenConstraint ProxyCertPathLengthConstraint OPTIONAL,
proxyPolicy ProxyPolicy
}
ProxyCertPathLengthConstraint ::= INTEGER
ProxyPolicy ::= SEQUENCE {
policyLanguage OBJECT IDENTIFIER,
policy OCTET STRING OPTIONAL
}
END
没有找到相关结果
已邀请:
1 个回复
玖料萄
ASN.1 encoding { Header length [content] [end] }ASN.1 header { ClassType Primitive/Constructed Tag-number }ProxyCertInfoExtension { [ProxyCertPathLengthConstraint] ProxyPolicy }ProxyCertInfoExtension { [Integer] ProxyPolicy }ProxyCertInfoExtension { [Integer] { policyLanguage [policy] } }ProxyCertInfoExtension { [Integer] { policyLanguage [Octet String] } }ProxyCertInfoExtension { [Integer] { id-ppl-anyLanguage [Octet String] } } ProxyCertInfoExtension { [Integer] { id-ppl-inheritAll [Octet String] } } ProxyCertInfoExtension { [Integer] { id-ppl-independent [Octet String] } }