Message274116
| Author |
christian.heimes |
| Recipients |
Lukasa, alex, christian.heimes, dstufft, giampaolo.rodola, janssen, pitrou, vstinner |
| Date |
2016年09月01日.10:32:12 |
| SpamBayes Score |
-1.0 |
| Marked as misclassified |
Yes |
| Message-id |
<1472725933.13.0.277192504527.issue27691@psf.upfronthosting.co.za> |
| In-reply-to |
| Content |
A GEN_RID is an OID plus some opaque data. It's up to an application to understand an OID and interpret its data. The value of a GEN_RID can be as simple as an int or UTF-8 strings or as complex as a nested ASN.1 struct for Kerberos principals.
I have modified Lib/test/make_ssl_certs.py to include two GEN_RIDS:
otherName.1 = 1.2.3.4;UTF8:some other identifier
otherName.2 = 1.3.6.1.5.2.2;SEQUENCE:princ_name
[princ_name]
realm = EXP:0, GeneralString:KERBEROS.REALM
principal_name = EXP:1, SEQUENCE:principal_seq
[principal_seq]
name_type = EXP:0, INTEGER:1
name_string = EXP:1, SEQUENCE:principals
[principals]
princ1 = GeneralString:username
1.3.6.1.5.2.2 is the OID for Kerberos public key init (pkinit), used for e.g. FAST pre-auth and SmartCard authentication. |
|