How are the OIDs and values in CertificateRequest extensions encoded exactly (I can't make it out from the text)?
Does the OID part have the ASN.1 OID TLV tag and length (e.g. is EKU 0x55 0x1D 0x25 or 0x06 0x03 0x55 0x1D 0x25)? And how is the value encoded? Using the same encoding as extnValue payload of respective extension in X.509 certifcates? Or is it OID-specific (and if it is, what exactly goes to it for EKU and KU? RFC 5280 ExtKeyUsageSyntax and KeyUsage?) (Currently the text just refers to DER encoding, and in a way that could be read to apply to just to values). -Ilari _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls