diff --git a/lib/asn1/Makefile.am b/lib/asn1/Makefile.am index 645cd942a..a3ba591e0 100644 --- a/lib/asn1/Makefile.am +++ b/lib/asn1/Makefile.am @@ -264,7 +264,11 @@ gen_files_rfc2459 = \ asn1_id_at_generationQualifier.x \ asn1_id_at_pseudonym.x \ asn1_id_domainComponent.x \ - asn1_id_Userid.x + asn1_id_Userid.x \ + asn1_id_pkix_pe.x \ + asn1_id_pe_proxyCertInfo.x \ + asn1_ProxyCertInfo.x \ + asn1_ProxyPolicy.x gen_files_pkinit = \ diff --git a/lib/asn1/rfc2459.asn1 b/lib/asn1/rfc2459.asn1 index b6ca776d9..eebbc3211 100644 --- a/lib/asn1/rfc2459.asn1 +++ b/lib/asn1/rfc2459.asn1 @@ -406,4 +406,21 @@ CRLReason ::= ENUMERATED { aACompromise (10) } +-- RFC 3820 Proxy Certificate Profile + +id-pkix-pe OBJECT IDENTIFIER ::= { iso(1) identified-organization(3) + dod(6) internet(1) security(5) mechanisms(5) pkix(7) 1 } + +id-pe-proxyCertInfo OBJECT IDENTIFIER ::= { id-pkix-pe 14 } + +ProxyPolicy ::= SEQUENCE { + policyLanguage OBJECT IDENTIFIER, + policy OCTET STRING OPTIONAL +} + +ProxyCertInfo ::= SEQUENCE { + pCPathLenConstraint INTEGER (0..4294967295) OPTIONAL, -- really MAX + proxyPolicy ProxyPolicy +} + END