Corrected the CRL distribution point extension handling.

1 files changed, 12 insertions, 16 deletions

diff --git a/lib/pkix.asn b/lib/pkix.asn
index 37e18060f0..2e81cee619 100644
--- a/lib/pkix.asn
+++ b/lib/pkix.asn
@@ -189,24 +189,20 @@ CRLDistributionPoints ::= SEQUENCE SIZE (1..MAX) OF DistributionPoint
 DistributionPoint ::= SEQUENCE {
      distributionPoint       [0]     DistributionPointName OPTIONAL,
      reasons                 [1]     ReasonFlags OPTIONAL,
-     cRLIssuer               [2]     GeneralNames OPTIONAL }
-
-DistributionPointName ::= CHOICE {
-     fullName                [0]     GeneralNames,
-     nameRelativeToCRLIssuer [1]     RelativeDistinguishedName }
-
--- Those are used to raw write a fullname.
-
-WritableCRLDistributionPoints ::= SEQUENCE SIZE (1..MAX) OF WritableDistributionPoint
+     cRLIssuer               [2]     GeneralNames OPTIONAL
+}
 
-WritableDistributionPoint ::= SEQUENCE {
-     distributionPoint       [0]     WriteableDistributionPointName OPTIONAL,
-     reasons                 [1]     ReasonFlags OPTIONAL,
-     cRLIssuer               [2]     GeneralNames OPTIONAL }
+-- original definition:
+-- DistributionPointName ::= CHOICE {
+--     fullName                [0]     GeneralNames,
+--     nameRelativeToCRLIssuer [1]     RelativeDistinguishedName 
+--}
+-- This does not work since it does not tag elements.
 
-WriteableDistributionPointName ::= CHOICE {
-     fullName                [0]     ANY,
-     nameRelativeToCRLIssuer [1]     RelativeDistinguishedName }
+DistributionPointName ::= SEQUENCE {
+     fullName                [0]     GeneralNames
+--     nameRelativeToCRLIssuer [1]     RelativeDistinguishedName 
+}
 
 ReasonFlags ::= BIT STRING {
      unused                  (0),