oxidecomputer / pki-playground

Tool for generating non-trivial X.509 certificate chains
Mozilla Public License 2.0
29 stars 2 forks source link

how to represent OID database #69

Open flihp opened 9 months ago

flihp commented 9 months ago

The review for #67 brought up the possible need for a more structured approach to managing how we represent OIDs and string names that map to OIDs. The const-oid crate has a const_oid::db::Database structure w/ a query interface we may want to copy.

The const_oid crate specifically invites contributions which we've made in the past. Their tool oidbgen doesn't look like it's meant to parse the PDFs generated by the TCG but others have contributed markdown with just the ASN.1 text from a spec that they reference in the plain text: https://github.com/RustCrypto/formats/blob/7ea12d36ea26746af9e80de8795aab692f0b3426/const-oid/oiddbgen/fips202.md