Hi,
does anyone know if the AS-REQ-PA-ENC-TS.pdu is used anywhere in the code ?
I found something very strange in this PDU (and it seems to be wrong
to me). Here is the semi-decoded PDU :
6a 81 ed AS-REQ
30 81 ea KDC-REQ ::= SEQUENCE
a1 03 pvno [1] // tag [1]
02 01 05 INTEGER, value = 5
a2 03 msg-type [2] // tag [2]
02 01 0a INTEGER, value = 10, AS
a3 50 padata [3] // tag [3]
30 4e SEQUENCE OF PA-DATA
30 4c PA-DATA ::= SEQUENCE
a1 03 padata-type [1] // tag [1]
02 01 02 INTEGER, value = 2, pa-enc-timestamp (DER
encoding of PA-ENC-TIMESTAMP)
a2 45 padata-value [2] // tag [2]
04 43 OCTET STRING
30 41 PA-ENC-TIMESTAMP :: SEQUENCE
a0 03 patimestamp [0] // tag 0
02 01 03
a2 3a
04 38
05 88 76 c7 be fe 1c 31 38 18 37 c2 e3 21 a7 f4
ea 10 ef 07 94 cc 2e e9 04 12 51 c8 44 eb fa d8
f0 e8 ec 7b 4b ff b4 e6 e4 34 a3 67 f8 ea c3 3e
e9 43 d7 15 f1 3b 57 e9
The padata-type is 2, which is a PA-ENC-TIMESTAMP. Then, the first
object in the SEQUENCE in the padata-value OCTET-STRING field should
have been a GeneralizedTime, not a INTEGER (02 01 03)
A clue, anyone ?
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com