summaryrefslogtreecommitdiff
path: root/lib/pkix.asn
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@gnutls.org>2009-10-25 20:49:18 +0200
committerNikos Mavrogiannopoulos <nmav@gnutls.org>2009-10-25 23:20:24 +0200
commitdc18e91405903607a7c5c8a9b185f8c286c244b6 (patch)
tree6daddc29e47dcbb07ca78f9dec63d8c8cfdcc2ff /lib/pkix.asn
parentac0d81e93315fc3ac5595396a179b0d31189a7ef (diff)
downloadgnutls-dc18e91405903607a7c5c8a9b185f8c286c244b6.tar.gz
Added GNUTLS_BAG_SECRET that adds support for storing a randomly generated key
into a PKCS-12 structure. This is a gnutls extension, since PKCS-12 does not specify what should be in the secret bag. What we do is store the key as OCTET string and specify an OID of the PKCS-9 random nonce.
Diffstat (limited to 'lib/pkix.asn')
-rw-r--r--lib/pkix.asn5
1 files changed, 5 insertions, 0 deletions
diff --git a/lib/pkix.asn b/lib/pkix.asn
index 51cd729951..8b3993aa54 100644
--- a/lib/pkix.asn
+++ b/lib/pkix.asn
@@ -591,6 +591,11 @@ pkcs-12-CRLBag ::= SEQUENCE {
crlValue [0] EXPLICIT ANY DEFINED BY crlId
}
+pkcs-12-SecretBag ::= SEQUENCE {
+ secretTypeId OBJECT IDENTIFIER,
+ secretValue [0] EXPLICIT ANY DEFINED BY secretTypeId
+}
+
-- x509CRL BAG-TYPE ::= {OCTET STRING IDENTIFIED BY {pkcs-9-crlTypes 1}}
-- DER-encoded X.509 CRL stored in OCTET STRING