Internet Engineering Task Force (IETF)                        R. Housley
Request for Comments: 7229                                Vigil Security
Category: Informational                                         May 2014
ISSN: 2070-1721
        
Internet Engineering Task Force (IETF)                        R. Housley
Request for Comments: 7229                                Vigil Security
Category: Informational                                         May 2014
ISSN: 2070-1721

Object Identifiers for Test Certificate Policies

测试证书策略的对象标识符

Abstract

摘要

This document provides several certificate policy identifiers for testing certificate handling software.

本文档提供了几个用于测试证书处理软件的证书策略标识符。

Status of This Memo

关于下段备忘

This document is not an Internet Standards Track specification; it is published for informational purposes.

本文件不是互联网标准跟踪规范；它是为了提供信息而发布的。

This document is a product of the Internet Engineering Task Force (IETF). It represents the consensus of the IETF community. It has received public review and has been approved for publication by the Internet Engineering Steering Group (IESG). Not all documents approved by the IESG are a candidate for any level of Internet Standard; see Section 2 of RFC 5741.

本文件是互联网工程任务组（IETF）的产品。它代表了IETF社区的共识。它已经接受了公众审查，并已被互联网工程指导小组（IESG）批准出版。并非IESG批准的所有文件都适用于任何级别的互联网标准；见RFC 5741第2节。

Information about the current status of this document, any errata, and how to provide feedback on it may be obtained at http://www.rfc-editor.org/info/rfc7229.

有关本文件当前状态、任何勘误表以及如何提供反馈的信息，请访问http://www.rfc-editor.org/info/rfc7229.

Copyright Notice

版权公告

Copyright (c) 2014 IETF Trust and the persons identified as the document authors. All rights reserved.

版权所有（c）2014 IETF信托基金和确定为文件作者的人员。版权所有。

This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License.

本文件受BCP 78和IETF信托有关IETF文件的法律规定的约束(http://trustee.ietf.org/license-info)自本文件出版之日起生效。请仔细阅读这些文件，因为它们描述了您对本文件的权利和限制。从本文件中提取的代码组件必须包括信托法律条款第4.e节中所述的简化BSD许可证文本，并提供简化BSD许可证中所述的无担保。

1. Introduction
1. 介绍

This document provides several certificate policy identifiers for testing certificate handling software. These certificate policy identifiers are not intended for use in the public Internet.

本文档提供了几个用于测试证书处理软件的证书策略标识符。这些证书策略标识符不用于公共Internet。

The certificate policy identifiers provided in this document are consistent with the certificate profile specified in [RFC5280]. They are appropriate for testing the certificate policy processing, especially the handling of the certificate policy extension, the policy constraints extension, and the policy mapping extension.

本文档中提供的证书策略标识符与[RFC5280]中指定的证书配置文件一致。它们适用于测试证书策略处理，特别是证书策略扩展、策略约束扩展和策略映射扩展的处理。

2. Certificate Policy Identifiers for Testing
2. 用于测试的证书策略标识符

The following certificate policy identifiers are provided for testing certificate handling software. ASN.1 [ASN1-2008] object identifiers are used to name certificate policies.

以下证书策略标识符用于测试证书处理软件。ASN.1[ASN1-2008]对象标识符用于命名证书策略。 

      id-pkix OBJECT IDENTIFIER ::= { iso(1) identified-organization(3)
                  dod(6) internet(1) security(5) mechanisms(5) pkix(7) }
        
      id-pkix OBJECT IDENTIFIER ::= { iso(1) identified-organization(3)
                  dod(6) internet(1) security(5) mechanisms(5) pkix(7) }
        
      id-TEST OBJECT IDENTIFIER ::= { id-pkix 13 }
        
      id-TEST OBJECT IDENTIFIER ::= { id-pkix 13 }
        
      -- Object Identifiers used ONLY for TESTING
      id-TEST-certPolicyOne       OBJECT IDENTIFIER ::= { id-TEST 1 }
      id-TEST-certPolicyTwo       OBJECT IDENTIFIER ::= { id-TEST 2 }
      id-TEST-certPolicyThree     OBJECT IDENTIFIER ::= { id-TEST 3 }
      id-TEST-certPolicyFour      OBJECT IDENTIFIER ::= { id-TEST 4 }
      id-TEST-certPolicyFive      OBJECT IDENTIFIER ::= { id-TEST 5 }
      id-TEST-certPolicySix       OBJECT IDENTIFIER ::= { id-TEST 6 }
      id-TEST-certPolicySeven     OBJECT IDENTIFIER ::= { id-TEST 7 }
      id-TEST-certPolicyEight     OBJECT IDENTIFIER ::= { id-TEST 8 }
        
      -- Object Identifiers used ONLY for TESTING
      id-TEST-certPolicyOne       OBJECT IDENTIFIER ::= { id-TEST 1 }
      id-TEST-certPolicyTwo       OBJECT IDENTIFIER ::= { id-TEST 2 }
      id-TEST-certPolicyThree     OBJECT IDENTIFIER ::= { id-TEST 3 }
      id-TEST-certPolicyFour      OBJECT IDENTIFIER ::= { id-TEST 4 }
      id-TEST-certPolicyFive      OBJECT IDENTIFIER ::= { id-TEST 5 }
      id-TEST-certPolicySix       OBJECT IDENTIFIER ::= { id-TEST 6 }
      id-TEST-certPolicySeven     OBJECT IDENTIFIER ::= { id-TEST 7 }
      id-TEST-certPolicyEight     OBJECT IDENTIFIER ::= { id-TEST 8 }
3. Security Considerations
3. 安全考虑

This specification does not identify particular certificate policies for use in the Internet public key infrastructure. The actual policies used for production certificates can have a significant impact on the confidence that one can place in the certificate. No confidence should be placed in any certificate that makes use of these certificate policy identifiers, since they are intended only for testing.

本规范不确定在Internet公钥基础结构中使用的特定证书策略。生产证书使用的实际策略可能会对证书的可信度产生重大影响。任何使用这些证书策略标识符的证书都不应被置为机密，因为它们仅用于测试。

4. IANA Considerations
4. IANA考虑

The object identifiers used in this document are defined in an arc delegated by IANA to the PKIX Working Group. No further action by IANA is necessary for this document or any anticipated updates.

本文件中使用的对象标识符在IANA委托给PKIX工作组的arc中定义。IANA无需对本文件或任何预期更新采取进一步行动。

5. Normative References
5. 规范性引用文件

[ASN1-2008] International Telecommunications Union, "Abstract Syntax Notation One (ASN.1): Specification of basic notation", ITU-T Recommendation X.680, November 2008.

[ASN1-2008]国际电信联盟，“抽象语法符号1（ASN.1）：基本符号规范”，ITU-T建议X.680，2008年11月。

[RFC5280] Cooper, D., Santesson, S., Farrell, S., Boeyen, S., Housley, R., and W. Polk, "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", RFC 5280, May 2008.

[RFC5280]Cooper，D.，Santesson，S.，Farrell，S.，Boeyen，S.，Housley，R.，和W.Polk，“Internet X.509公钥基础设施证书和证书撤销列表（CRL）配置文件”，RFC 52802008年5月。

Appendix A. ASN.1 Module
附录A.ASN.1模块

This appendix provides the certificate policy identifiers (object identifiers) in an ASN.1 module. No fancy structures are needed, so this module is compatible with [ASN1-2008].

本附录提供ASN.1模块中的证书策略标识符（对象标识符）。不需要花哨的结构，因此本模块与[ASN1-2008]兼容。 

   PKIXTestCertPolicies { iso(1) identified-organization(3) dod(6)
      internet(1) security(5) mechanisms(5) pkix(7) id-mod(0)
      id-mod-TEST-certPolicies(83) }
        
   PKIXTestCertPolicies { iso(1) identified-organization(3) dod(6)
      internet(1) security(5) mechanisms(5) pkix(7) id-mod(0)
      id-mod-TEST-certPolicies(83) }
        
   DEFINITIONS IMPLICIT TAGS ::=
        
   DEFINITIONS IMPLICIT TAGS ::=

BEGIN

开始 

   -- EXPORTS ALL --
   -- IMPORTS NONE --
        
   -- EXPORTS ALL --
   -- IMPORTS NONE --
        
   id-pkix OBJECT IDENTIFIER ::= { iso(1) identified-organization(3)
               dod(6) internet(1) security(5) mechanisms(5) pkix(7) }
        
   id-pkix OBJECT IDENTIFIER ::= { iso(1) identified-organization(3)
               dod(6) internet(1) security(5) mechanisms(5) pkix(7) }
        
   id-TEST OBJECT IDENTIFIER ::= { id-pkix 13 }
        
   id-TEST OBJECT IDENTIFIER ::= { id-pkix 13 }
        
   -- Object Identifiers used ONLY for TESTING
   id-TEST-certPolicyOne       OBJECT IDENTIFIER ::= { id-TEST 1 }
   id-TEST-certPolicyTwo       OBJECT IDENTIFIER ::= { id-TEST 2 }
   id-TEST-certPolicyThree     OBJECT IDENTIFIER ::= { id-TEST 3 }
   id-TEST-certPolicyFour      OBJECT IDENTIFIER ::= { id-TEST 4 }
   id-TEST-certPolicyFive      OBJECT IDENTIFIER ::= { id-TEST 5 }
   id-TEST-certPolicySix       OBJECT IDENTIFIER ::= { id-TEST 6 }
   id-TEST-certPolicySeven     OBJECT IDENTIFIER ::= { id-TEST 7 }
   id-TEST-certPolicyEight     OBJECT IDENTIFIER ::= { id-TEST 8 }
        
   -- Object Identifiers used ONLY for TESTING
   id-TEST-certPolicyOne       OBJECT IDENTIFIER ::= { id-TEST 1 }
   id-TEST-certPolicyTwo       OBJECT IDENTIFIER ::= { id-TEST 2 }
   id-TEST-certPolicyThree     OBJECT IDENTIFIER ::= { id-TEST 3 }
   id-TEST-certPolicyFour      OBJECT IDENTIFIER ::= { id-TEST 4 }
   id-TEST-certPolicyFive      OBJECT IDENTIFIER ::= { id-TEST 5 }
   id-TEST-certPolicySix       OBJECT IDENTIFIER ::= { id-TEST 6 }
   id-TEST-certPolicySeven     OBJECT IDENTIFIER ::= { id-TEST 7 }
   id-TEST-certPolicyEight     OBJECT IDENTIFIER ::= { id-TEST 8 }

END

终止

Author's Address

作者地址

Russell Housley Vigil Security, LLC 918 Spring Knoll Drive Herndon, VA 20170 USA

Russell Housley Vigil Security，LLC 918 Spring Knoll Drive Herndon，弗吉尼亚州，邮编20170 

   EMail: housley@vigilsec.com
        
   EMail: housley@vigilsec.com