Skip to content

Commit 76a6717

Browse files
authored
add Microsoft and Kerberos OIDs (#2035)
1 parent e3295fb commit 76a6717

File tree

3 files changed

+140
-0
lines changed

3 files changed

+140
-0
lines changed

const-oid/oiddbgen/krb5-oids.asn

Lines changed: 72 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,72 @@
1+
https://web.mit.edu/kerberos/krb5-oids/krb5-oids.asn
2+
3+
Krb5-OIDS {
4+
iso(1) identified-organization(3) dod(6) internet(1)
5+
security(5) kerberosV5(2) modules(4) krb5-oids(3)
6+
} DEFINITIONS ::= BEGIN
7+
8+
EXPORTS -- none -- ;
9+
10+
--
11+
-- NOTE: Identifier names in this module are subject to change at any time.
12+
-- Applications should not rely on these identifier names for any reason,
13+
-- and the EXPORTS clause above reflects this. The identifier names are
14+
-- primarily intended for human readers.
15+
--
16+
-- Contact <krb5-oid-registrar@mit.edu> to request assignments under
17+
-- the krb5 OID arc.
18+
--
19+
20+
-- krb5 OID arc, per RFC 1510 (with "dod" node corrected)
21+
id-krb5 OBJECT IDENTIFIER ::= { iso(1) identified-organization(3) dod(6) internet(1) security(5) kerberosV5(2)}
22+
23+
-- assigned by pkinit (work in progress)
24+
id-principalName OBJECT IDENTIFIER ::= { id-krb5 2 }
25+
26+
--
27+
-- arc for PKINIT (RFC 4556)
28+
--
29+
id-pkinit OBJECT IDENTIFIER ::= { id-krb5 3 }
30+
31+
id-pkauthdata OBJECT IDENTIFIER ::= { id-pkinit 1 }
32+
id-pkdhkeydata OBJECT IDENTIFIER ::= { id-pkinit 2 }
33+
id-pkrkeydata OBJECT IDENTIFIER ::= { id-pkinit 3 }
34+
id-pkekuoid OBJECT IDENTIFIER ::= { id-pkinit 4 }
35+
id-pkkdcekuoid OBJECT IDENTIFIER ::= { id-pkinit 5 }
36+
37+
-- draft-ietf-kitten-pkinit-alg-agility
38+
id-pkinit-kdf OBJECT IDENTIFIER ::= { id-pkinit 6 }
39+
id-pkinit-kdf-ah-sha1 OBJECT IDENTIFIER ::= { id-pkinit-kdf sha1(1) }
40+
id-pkinit-kdf-ah-sha256 OBJECT IDENTIFIER ::= { id-pkinit-kdf sha256(2) }
41+
id-pkinit-kdf-ah-sha512 OBJECT IDENTIFIER ::= { id-pkinit-kdf sha512(3) }
42+
id-pkinit-kdf-ah-sha384 OBJECT IDENTIFIER ::= { id-pkinit-kdf sha384(4) }
43+
44+
-- IAKERB (work in progress)
45+
id-iakerb OBJECT IDENTIFIER ::= { id-krb5 5 }
46+
47+
--
48+
-- krb5 ASN.1 modules
49+
--
50+
id-krb5-modules OBJECT IDENTIFIER ::= { id-krb5 4 }
51+
52+
-- RFC 4120 module
53+
id-krb5-krb5spec2 OBJECT IDENTIFIER ::= { id-krb5-modules 2 }
54+
55+
-- OID for this module
56+
id-krb5-OIDS OBJECT IDENTIFIER ::= { id-krb5-modules 3 }
57+
58+
-- krb-extensions (work in progress)
59+
60+
id-krb5-krb5spec3 OBJECT IDENTIFIER ::= { id-krb5-modules 4 }
61+
62+
id-pkinit-module OBJECT IDENTIFIER ::= { id-krb5-modules 5 }
63+
64+
id-pkinit-agility-module OBJECT IDENTIFIER ::= { id-pkinit-module 1 }
65+
66+
id-cammac-module OBJECT IDENTIFIER ::= { id-krb5-modules 7 }
67+
68+
id-spake-module OBJECT IDENTIFIER ::= { id-krb5-modules 8 }
69+
70+
id-authentication-indicators OBJECT IDENTIFIER ::= { id-krb5-modules 9 }
71+
72+
END

const-oid/oiddbgen/microsoft.asn

Lines changed: 63 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,63 @@
1+
2+
{iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) microsoft(311)}
3+
iso OBJECT IDENTIFIER ::= { 1 }
4+
identified-organization OBJECT IDENTIFIER ::= { iso 3 }
5+
dod OBJECT IDENTIFIER ::= { identified-organization 6 }
6+
internet OBJECT IDENTIFIER ::= { dod 1 }
7+
private OBJECT IDENTIFIER ::= { internet 4 }
8+
enterprises OBJECT IDENTIFIER ::= { private 1 }
9+
microsoft OBJECT IDENTIFIER ::= { enterprises 311 }
10+
11+
12+
Software OBJECT IDENTIFIER ::= { microsoft 1 }
13+
Authenticode OBJECT IDENTIFIER ::= { microsoft 2 }
14+
Time Stamping OBJECT IDENTIFIER ::= { microsoft 3 }
15+
Permissions OBJECT IDENTIFIER ::= { microsoft 4 }
16+
Crypto 2.0 OBJECT IDENTIFIER ::= { microsoft 10 }
17+
Catalog OBJECT IDENTIFIER ::= { microsoft 12 }
18+
Microsoft-PKCS10-OIDs OBJECT IDENTIFIER ::= { microsoft 13 }
19+
Microsoft-Java OBJECT IDENTIFIER ::= { microsoft 15 }
20+
Microsoft-Outlook-Exchange OBJECT IDENTIFIER ::= { microsoft 16 }
21+
Microsoft-PKCS12-attributes OBJECT IDENTIFIER ::= { microsoft 17 }
22+
Microsoft-Hydra OBJECT IDENTIFIER ::= { microsoft 18 }
23+
Microsoft-ISPU-Test OBJECT IDENTIFIER ::= { microsoft 19 }
24+
Microsoft-enrollment-infrastructure OBJECT IDENTIFIER ::= { microsoft 20 }
25+
Microsoft-CertSrv-Infrastructure OBJECT IDENTIFIER ::= { microsoft 21 }
26+
Microsoft-Directory-Service OBJECT IDENTIFIER ::= { microsoft 25 }
27+
IIS OBJECT IDENTIFIER ::= { microsoft 30 }
28+
Windows-updates-and-service-packs OBJECT IDENTIFIER ::= { microsoft 31 }
29+
Fonts OBJECT IDENTIFIER ::= { microsoft 40 }
30+
Microsoft-Licensing-and-Registration OBJECT IDENTIFIER ::= { microsoft 41 }
31+
Microsoft-Corporate-PKI-ITG OBJECT IDENTIFIER ::= { microsoft 42 }
32+
Microsoft-WWOps-BizExt OBJECT IDENTIFIER ::= { microsoft 43 }
33+
Microsoft-Peer-Networking OBJECT IDENTIFIER ::= { microsoft 44 }
34+
Mobile Devices-Code-Signing OBJECT IDENTIFIER ::= { microsoft 45 }
35+
Extended-validation OBJECT IDENTIFIER ::= { microsoft 60 }
36+
BitLocker-Drive-Encryption OBJECT IDENTIFIER ::= { microsoft 67 }
37+
CAPICOM OBJECT IDENTIFIER ::= { microsoft 88 }
38+
39+
szOID_AUTO_ENROLL_CTL_USAGE OBJECT IDENTIFIER ::= { Microsoft-enrollment-infrastructure 1 }
40+
szOID_ENROLL_CERTTYPE_EXTENSION OBJECT IDENTIFIER ::= { Microsoft-enrollment-infrastructure 2 }
41+
szOID_CERT_MANIFOLD OBJECT IDENTIFIER ::= { Microsoft-enrollment-infrastructure 3 }
42+
43+
MS-Certificate-Services-CA-Version OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 1 }
44+
szOID_CERTSRV_PREVIOUS_CERT_HASH OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 2 }
45+
szOID_CRL_VIRTUAL_BASE OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 3 }
46+
szOID_CRL_NEXT_PUBLISH OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 4 }
47+
szOID_KP_CA_EXCHANGE OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 5 }
48+
szOID_KP_KEY_RECOVERY_AGENT OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 6 }
49+
szOID_CERTIFICATE_TEMPLATE OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 7 }
50+
szOID_ENTERPRISE_OID_ROOT OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 8 }
51+
szOID_RDN_DUMMY_SIGNER OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 9 }
52+
szOID_APPLICATION_CERT_POLICIES OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 10 }
53+
szOID_APPLICATION_POLICY_MAPPINGS OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 11 }
54+
szOID_APPLICATION_POLICY_CONSTRAINTS OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 12 }
55+
szOID_ARCHIVED_KEY_ATTR OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 13 }
56+
szOID_CRL_SELF_CDP OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 14 }
57+
szOID_REQUIRE_CERT_CHAIN_POLICY OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 15 }
58+
szOID_ARCHIVED_KEY_CERT_HASH OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 16 }
59+
szOID_ISSUED_CERT_HASH OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 17 }
60+
szOID_DS_EMAIL_REPLICATION OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 19 }
61+
szOID_REQUEST_CLIENT_INFO OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 20 }
62+
szOID_ENCRYPTED_KEY_HASH OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 21 }
63+
szOID_CERTSRV_CROSSCA_VERSION OBJECT IDENTIFIER ::= {Microsoft-CertSrv-Infrastructure 22 }

const-oid/oiddbgen/src/main.rs

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -43,6 +43,11 @@ const MDS: &[(&str, &str)] = &[
4343
("brng", include_str!("../stb/brng.asn")),
4444
("bash", include_str!("../stb/bash.asn")),
4545
("bake", include_str!("../stb/bake.asn")),
46+
// created from: https://oidref.com/1.3.6.1.4.1.311
47+
("microsoft", include_str!("../microsoft.asn")),
48+
49+
// loaded from https://web.mit.edu/kerberos/krb5-oids/krb5-oids.asn
50+
("kerberosv5", include_str!("../krb5-oids.asn")),
4651
];
4752

4853
// Bases defined in other places.

0 commit comments

Comments
 (0)