From: Russ Housley <housley(_at_)spyrus(_dot_)com>
John:
1) How about the following ASN.1. It has shorter names.
AuthAttributes ::= SET OF AuthAttribute
AuthAttribute ::= SEQUENCE {
attrType OBJECT IDENTIFIER,
critical BOOLEAN DEFAULT FALSE,
attrValues SET OF AttributeValue }
UnauthAttributes ::= SET OF UnauthAttribute
UnauthAttribute ::= SEQUENCE {
attrType OBJECT IDENTIFIER,
attrValues SET OF AttributeValue }
Russ,
How about adding a size constraint to the ASN.1. Do we envision
ever needing an empty set of authenticated or unauthenticated
attributes?
AuthAttributes ::= SET SIZE(1..MAX) OF AuthAttribute
UnauthAttributes ::= SET SIZE(1..MAX) OF UnauthAttribute