On Mon, Nov 03, 2003 at 09:06:25PM +0100, Olivier Dubuisson wrote: > BTW corrected modules for X.519 (and a lot of other ITU-T > Recommendations) are freely available in the module database of the > ITU-T ASN.1 Project at: > http://www.itu.int/itu-t/asn1/database/
Is there some way to lookup what modules reference other modules? For example, I find that X509 is a little sub-optimal when defining SupportedAlgorithms. The ASN1 in RFC2459 is very similar, but is more comprehensive because it defines some algorithms. Is there an additional ASN module somewhere which contains definitions for the commonly used algorithms (like the ones defined in RFC2459)? I'd like some way of finding out what standard ASN modules reference X509 modules. I am beginning to wonder if it is even possible to get a set of ASN modules that consistently handle certificates. It seems like the ball is dropped in the X509 court and picked up in a bunch or RFCs which go on to define their own ASN which may be consistent within the RFCs, but is inconsistent with the X500 set of standards. Does anyone actually use the published X509 ASN? Or is all certificate handling done via the PKIX RFC defined ASN? -- John Birrell
