2 # X509CE conformation file
4 #.IMPORT ../x509if/x509if-exp.cnf
5 #.IMPORT ../x509af/x509af-exp.cnf
6 #.IMPORT ../x509sat/x509sat-exp.cnf
7 #.IMPORT ../p1/p1-exp.cnf
10 #.CLASS CERT-POLICY-QUALIFIER
11 &id ObjectIdentifierType
15 # InformationFramework classes
17 #&derivation ClassReference ATTRIBUTE
19 #&equality-match ClassReference MATCHING-RULE
20 #&ordering-match ClassReference MATCHING-RULE
21 #&substrings-match ClassReference MATCHING-RULE
22 #&single-valued BooleanType
23 #&collective BooleanType
24 #&no-user-modification BooleanType
26 #&id ObjectIdentifierType
30 &ParentMatchingRules ClassReference MATCHING-RULE
32 &uniqueMatchIndicator ClassReference ATTRIBUTE
33 &id ObjectIdentifierType
38 AuthorityKeyIdentifier
42 BasicConstraintsSyntax
44 CertificateExactAssertion
45 CertificateListAssertion
46 CertificateListExactAssertion
47 CertificatePairAssertion
48 CertificatePairExactAssertion
49 CertificatePoliciesSyntax
67 IssuingDistPointSyntax
78 PolicyConstraintsSyntax
101 CertificatePoliciesSyntax B "2.5.29.3" "id-ce-certificatePolicies"
102 AttributesSyntax B "2.5.29.9" "id-ce-subjectDirectoryAttributes"
103 SubjectKeyIdentifier B "2.5.29.14" "id-ce-subjectKeyIdentifier"
104 KeyUsage B "2.5.29.15" "id-ce-keyUsage"
105 PrivateKeyUsagePeriod B "2.5.29.16" "id-ce-privateKeyUsagePeriod"
106 GeneralNames B "2.5.29.17" "id-ce-subjectAltName"
107 GeneralNames B "2.5.29.18" "id-ce-issuerAltName"
108 BasicConstraintsSyntax B "2.5.29.19" "id-ce-basicConstraints"
109 CRLNumber B "2.5.29.20" "id-ce-cRLNumber"
110 CRLReason B "2.5.29.21" "id-ce-reasonCode"
111 HoldInstruction B "2.5.29.23" "id-ce-instructionCode"
112 BaseCRLNumber B "2.5.29.27" "id-ce-deltaCRLIndicator"
113 IssuingDistPointSyntax B "2.5.29.28" "id-ce-issuingDistributionPoint"
114 GeneralNames B "2.5.29.29" "id-ce-certificateIssuer"
115 NameConstraintsSyntax B "2.5.29.30" "id-ce-nameConstraints"
116 CRLDistPointsSyntax B "2.5.29.31" "id-ce-cRLDistributionPoints"
117 CertificatePoliciesSyntax B "2.5.29.32" "id-ce-certificatePolicies"
118 PolicyMappingsSyntax B "2.5.29.33" "id-ce-policyMappings"
119 AuthorityKeyIdentifier B "2.5.29.35" "id-ce-authorityKeyIdentifier"
120 PolicyConstraintsSyntax B "2.5.29.36" "id-ce-policyConstraints"
121 KeyPurposeIDs B "2.5.29.37" "id-ce-extKeyUsage"
122 CRLStreamIdentifier B "2.5.29.40" "id-ce-cRLStreamIdentifier"
123 CRLScopeSyntax B "2.5.29.44" "id-ce-cRLScope"
124 StatusReferrals B "2.5.29.45" "id-ce-statusReferrals"
125 CRLDistPointsSyntax B "2.5.29.46" "id-ce-freshestCRL"
126 OrderedListSyntax B "2.5.29.47" "id-ce-orderedList"
127 DeltaInformation B "2.5.29.53" "id-ce-deltaInfo"
128 SkipCerts B "2.5.29.54" "id-ce-inhibitAnyPolicy"
129 ToBeRevokedSyntax B "2.5.29.58" "id-ce-toBeRevoked"
130 RevokedGroupsSyntax B "2.5.29.59" "id-ce-RevokedGroups"
131 ExpiredCertsOnCRL B "2.5.29.60" "id-ce-expiredCertsOnCRL"
132 AAIssuingDistPointSyntax B "2.5.29.61" "id-ce-aAissuingDistributionPoint"
133 NFTypes B "1.3.6.1.5.5.7.1.34" "id-pe-nftype"
135 CertificateAssertion B "2.5.13.35" "id-mr-certificateMatch"
136 CertificatePairExactAssertion B "2.5.13.36" "id-mr-certificatePairExactMatch"
137 CertificatePairAssertion B "2.5.13.37" "id-mr-certificatePairMatch"
138 CertificateListExactAssertion B "2.5.13.38" "id-mr-certificateListExactMatch"
139 CertificateListAssertion B "2.5.13.39" "id-mr-certificateListMatch"
140 PkiPathMatchSyntax B "2.5.13.62" "id-mr-pkiPathMatch"
141 EnhancedCertificateAssertion B "2.5.13.65" "id-mr-enhancedCertificateMatch"
143 # These are obsolete???
144 # The following OBJECT IDENTIFIERS are not used by this Specification:
145 # {id-ce 2}, {id-ce 3}, {id-ce 4}, {id-ce 5}, {id-ce 6}, {id-ce 7},
146 # {id-ce 8}, {id-ce 10}, {id-ce 11}, {id-ce 12}, {id-ce 13},
147 # {id-ce 22}, {id-ce 25}, {id-ce 26}
149 # Microsoft extensions
150 CertificateTemplate B "1.3.6.1.4.1.311.21.7" "id-ms-certificate-template"
151 CertificatePoliciesSyntax B "1.3.6.1.4.1.311.21.10" "id-ms-application-certificate-policies"
152 NtdsCaSecurity B "1.3.6.1.4.1.311.25.2" "id-ms-ntds-ca-security"
153 NtdsObjectSid B "1.3.6.1.4.1.311.25.2.1" "id-ms-ntds-object-sid"
156 EntrustVersionInfo B "1.2.840.113533.7.65.0" "id-ce-entrustVersionInfo"
163 ScramblerCapabilities/capability DISPLAY = BASE_DEC STRINGS = VALS64(ciplus_scr_cap)
164 SecurityLevel DISPLAY = BASE_DEC STRINGS = VALS64(ciplus_security_level)
167 CRLReferral/issuer crlr_issuer
168 CertificatePairExactAssertion/issuedToThisCAAssertion cpea_issuedToThisCAAssertion
169 CertificatePairExactAssertion/issuedByThisCAAssertion cpea_issuedByThisCAAssertion
170 CertificateGroup/serialNumberRange certificateGroupNumberRange
171 CertificateAssertion/subjectAltName subjectAltNameType
172 EnhancedCertificateAssertion/pathToName enhancedPathToName
174 #.FN_PARS PolicyQualifierInfo/policyQualifierId
175 FN_VARIANT = _str HF_INDEX = hf_x509ce_object_identifier_id VAL_PTR = &actx->external.direct_reference
177 #.FN_BODY PolicyQualifierInfo/qualifier
178 offset=call_ber_oid_callback(actx->external.direct_reference, tvb, offset, actx->pinfo, tree, NULL);
180 #.FN_BODY GeneralName/iPAddress
181 uint32_t len = tvb_reported_length(tvb);
184 proto_tree_add_item(tree, hf_x509ce_IPAddress_ipv4, tvb, offset, 4, ENC_BIG_ENDIAN);
187 case 8: /* IPv4 + Mask*/
188 proto_tree_add_item(tree, hf_x509ce_IPAddress_ipv4, tvb, offset, 4, ENC_BIG_ENDIAN);
190 proto_tree_add_item(tree, hf_x509ce_IPAddress_ipv4_mask, tvb, offset, 4, ENC_BIG_ENDIAN);
194 proto_tree_add_item(tree, hf_x509ce_IPAddress_ipv6, tvb, offset, 16, ENC_NA);
197 case 32: /* IPv6 + Mask */
198 proto_tree_add_item(tree, hf_x509ce_IPAddress_ipv6, tvb, offset, 16, ENC_NA);
200 proto_tree_add_item(tree, hf_x509ce_IPAddress_ipv6_mask, tvb, offset, 16, ENC_NA);
203 default: /* Unknown */
204 proto_tree_add_item(tree, hf_x509ce_IPAddress_unknown, tvb, offset, len, ENC_NA);
209 #.FN_PARS OtherNameType
210 FN_VARIANT = _str VAL_PTR = &actx->external.direct_reference
212 #.FN_BODY OtherNameValue
213 offset=call_ber_oid_callback(actx->external.direct_reference, tvb, offset, actx->pinfo, tree, NULL);
215 #.FN_FTR GeneralName/uniformResourceIdentifier
217 proto_item_set_url(actx->created_item);
222 # Editor modelines - https://www.wireshark.org/tools/modelines.html
227 # indent-tabs-mode: nil
230 # vi: set shiftwidth=2 tabstop=8 expandtab:
231 # :indentSize=2:tabSize=8:noTabs=true: