I'm getting a little confused about some parts of OID definitions.
I've tried to understand what "ASN.1 Complete" has to say about it,
but I can't say it really cleared the confusion.
One can see definitions like this:
{ iso standard 8571 abstract-syntax (2) }
which is supposed to mean '{ 1 0 8571 2 }', and it makes it clear that
each name ('iso', 'standard' and 'abstract-syntax') have a number each
as "value" (1, 0 and 2 respectively). However, one can also see
things like:
{ id-pkix-ocsp 1 }
where 'id-pkix-ocsp' is the OID of the OCSP arc.
What I wonder is, for the first variant, are names like 'iso' and
'standard' OIDs with just one -- uhm -- level (in lack of a better
name), or are they just names that map to a number each and are not
really considered OIDs in themselves? And if those are considered
OIDs, is there anything stopping anyone from doing crazy things like:
id-stupid-OCSP-doubling OBJECT IDENTIFIER ::= {
id-pkix-ocsp id-pkix-ocsp 999 }
and then end up with '{ 1 3 6 1 5 5 7 30 1 1 3 6 1 5 5 7 30 1 999 }'?
(id-pkix-ocsp = { 1 3 6 1 5 5 7 30 1 }).
I'm trying to make a simple perl script that is capable of parsing
through an ASN.1 module embedded in any document an extracting the
OIDs from it. When I'm done with that, I'll extend it to be able to
parse LDAP schemas entries as in RFC2256. Then we will perhaps
finally clear the mess that's currently present in
crypto/objects/objects.txt...
--
Richard Levitte \ Spannv�gen 38, II \ [EMAIL PROTECTED]
Chairman@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47
Redakteur@Stacken \ SWEDEN \ or +46-709-50 36 10
Procurator Odiosus Ex Infernis -- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/
Software Engineer, Celo Communications: http://www.celocom.com/
Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
