diff options
| -rw-r--r-- | trust-assertions.xml | 17 |
1 files changed, 4 insertions, 13 deletions
diff --git a/trust-assertions.xml b/trust-assertions.xml index fdfddf4..9450b8c 100644 --- a/trust-assertions.xml +++ b/trust-assertions.xml @@ -205,10 +205,13 @@ <para>The <literal>CKA_X_PURPOSE</literal> attribute contains a string which represents the <link linkend='trust-purpose'>purpose of the trust assertion</link>. These are generally OIDs. The following predefined values match those of the - <ulink url='http://www.ietf.org/rfc/rfc2459.txt'>Extended Key Usage X.509 extension</ulink>. + <ulink url='http://www.ietf.org/rfc/rfc5280.txt'>Extended Key Usage X.509 extension</ulink>. Other values may be used when interoperability of the trust assertion between multiple applications is not required.</para> + <para>Applications should ignore trust assertions whose <literal>CKA_X_PURPOSE</literal> attribute + they do not understand. They should not treat them as negative assertions.</para> + <table id='defined-purposes'> <title>Predefined Purposes</title> <tgroup cols="2"> @@ -236,18 +239,6 @@ <entry>Email Protection</entry> </row> <row> - <entry><literal>1.3.6.1.5.5.7.3.5</literal></entry> - <entry>IPsec Endpoint</entry> - </row> - <row> - <entry><literal>1.3.6.1.5.5.7.3.6</literal></entry> - <entry>IPsec Tunnel</entry> - </row> - <row> - <entry><literal>1.3.6.1.5.5.7.3.7</literal></entry> - <entry>IPsec User</entry> - </row> - <row> <entry><literal>1.3.6.1.5.5.7.3.8</literal></entry> <entry>Time Stamping</entry> </row> |