Add definitions from RFC 3820, Proxy Certificate Profile.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17248 ec53bebd-3082-4978-b11e-865c3cabbd6b

diff --git a/lib/asn1/Makefile.am b/lib/asn1/Makefile.am
index 645cd942a6c455091f3f1b3d29eeff1cc8f59b55..a3ba591e03e5e09e5b2054e6a488152afac8b0bf 100644 (file)
--- a/lib/asn1/Makefile.am
+++ b/lib/asn1/Makefile.am
@@ -264,7 +264,11 @@ gen_files_rfc2459 =                                        \
        asn1_id_at_generationQualifier.x                \
        asn1_id_at_pseudonym.x                          \
        asn1_id_domainComponent.x                       \
-       asn1_id_Userid.x
+       asn1_id_Userid.x                                \
+       asn1_id_pkix_pe.x                               \
+       asn1_id_pe_proxyCertInfo.x                      \
+       asn1_ProxyCertInfo.x                            \
+       asn1_ProxyPolicy.x
 
 
 gen_files_pkinit =                                     \

diff --git a/lib/asn1/rfc2459.asn1 b/lib/asn1/rfc2459.asn1
index b6ca776d9f54ae2428c09e5f5ffdf0154a369bd8..eebbc3211b90f9469d3d7da5a8080eb351bd7b16 100644 (file)
--- a/lib/asn1/rfc2459.asn1
+++ b/lib/asn1/rfc2459.asn1
@@ -406,4 +406,21 @@ CRLReason ::= ENUMERATED {
        aACompromise           (10)
 }
 
+-- RFC 3820 Proxy Certificate Profile
+
+id-pkix-pe OBJECT IDENTIFIER ::= { iso(1) identified-organization(3)
+            dod(6) internet(1) security(5) mechanisms(5) pkix(7) 1 }
+
+id-pe-proxyCertInfo OBJECT IDENTIFIER ::= { id-pkix-pe 14 }
+
+ProxyPolicy ::= SEQUENCE {
+       policyLanguage          OBJECT IDENTIFIER,
+       policy                  OCTET STRING OPTIONAL
+}
+
+ProxyCertInfo ::= SEQUENCE {
+       pCPathLenConstraint     INTEGER (0..4294967295) OPTIONAL, -- really MAX
+       proxyPolicy             ProxyPolicy
+}
+
 END