From nobody Tue Nov 1 08:30:33 2016 Return-Path: X-Original-To: anima-bootstrap@ietfa.amsl.com Delivered-To: anima-bootstrap@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9763C129AA6; Tue, 1 Nov 2016 08:30:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.903 X-Spam-Level: X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=trilliant.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FBQBLqb9BRzn; Tue, 1 Nov 2016 08:30:29 -0700 (PDT) Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02on0137.outbound.protection.outlook.com [104.47.38.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8CFBD129AB6; Tue, 1 Nov 2016 08:30:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Trilliant.onmicrosoft.com; s=selector1-trilliantinc-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=rlUHUzknxgNVNW+HFnXmDyPGJX8X9lKgKDCNFJVwq4U=; b=QQfH4mDVVN5xhRtSD4eW0Fbchl2ihyFHkab1EKoSYKL/xi2zDF5JYO/s0TBenv7qMeQE7YKPOP7qzVEZARMC6/4uHjl3RJSobv79k8u7mzZmKG24OYnyZ329OaMC0+HYTqgjzhnHlALSndLH1KPbeyITbiow8LYwhAXYXSNEjbk= Received: from BN6PR06MB2308.namprd06.prod.outlook.com (10.173.19.139) by BN6PR06MB2611.namprd06.prod.outlook.com (10.173.145.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.693.12; Tue, 1 Nov 2016 15:30:27 +0000 Received: from BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) by BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) with mapi id 15.01.0679.015; Tue, 1 Nov 2016 15:30:26 +0000 From: Michel Veillette To: "consultancy@vanderstok.org" , Anima-bootstrap , Core Thread-Topic: [core] Fwd: New Version Notification for draft-vanderstok-core-coap-est-00.txt Thread-Index: AQHSMfbT9L6wtjR1qUmGz/IT6U8mBaDEQd4g Date: Tue, 1 Nov 2016 15:30:26 +0000 Message-ID: References: <147775346922.30618.14590857285848221161.idtracker@ietfa.amsl.com> In-Reply-To: Accept-Language: fr-CA, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michel.Veillette@trilliantinc.com; x-originating-ip: [207.96.192.122] x-microsoft-exchange-diagnostics: 1; BN6PR06MB2611; 7:B7fYQN55Pn5Q8pLf3MApLWHjyW1bBoshhLdSY0U3ck5lmUvUv2uCNZzy35XShCT8WWsQFMgTx2JVoGmxniSp0c574hDlutqTyayAPn8nlncPMBVLcRQMd33g9ZBrhE0eJhEHF5oG+rDvOXPc0G7+4ZRgmzwVmxt2KVVLKDcy6jUvMx9oF/hiZwkBLt+k9pyBJCWhZWLhiY9/yMSrbtZAEFbm30xhw2xbzentIermciwYPk/FS/Kc1dVNQIpz1ZJTqpeH11qsYJl2/nISPJsuRX4n/OOURGNP1k90zwCcWy+pVzx9qotu17Kl06L7GeLfD2bdLA7f3yYZzoFZKz/HS1M9nnsGNx+kByqj1iC9EOY= x-forefront-antispam-report: SFV:SKI; SCL:-1SFV:NSPM; SFS:(10019020)(6009001)(7916002)(199003)(377454003)(377424004)(13464003)(189002)(2950100002)(7736002)(54356999)(15975445007)(5002640100001)(2900100001)(77096005)(76176999)(15650500001)(8676002)(50986999)(81166006)(86362001)(230783001)(81156014)(8936002)(3660700001)(101416001)(92566002)(2501003)(586003)(122556002)(74316002)(3280700002)(33656002)(9686002)(31430400001)(68736007)(2906002)(305945005)(107886002)(5660300001)(99286002)(105586002)(66066001)(189998001)(5001770100001)(3846002)(106116001)(6116002)(76576001)(102836003)(7846002)(19580405001)(7696004)(97736004)(19580395003)(87936001)(4001150100001)(10400500002)(106356001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR06MB2611; H:BN6PR06MB2308.namprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; x-ms-office365-filtering-correlation-id: 5a183daa-99a4-4415-4fc9-08d4026c011d x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN6PR06MB2611; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(120809045254105)(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001); SRVR:BN6PR06MB2611; BCL:0; PCL:0; RULEID:; SRVR:BN6PR06MB2611; x-forefront-prvs: 01136D2D90 received-spf: None (protection.outlook.com: trilliantinc.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: trilliantinc.com X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2016 15:30:26.2392 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4f6fbd13-0dfb-4150-85c3-d43260c04309 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR06MB2611 Archived-At: Subject: Re: [Anima-bootstrap] [core] Fwd: New Version Notification for draft-vanderstok-core-coap-est-00.txt X-BeenThere: anima-bootstrap@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Mailing list for the bootstrap design team of the ANIMA WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Nov 2016 15:30:31 -0000 Hi Peter In section 3 of "draft-vanderstok-core-coap-est-00", "Server-generated key"= is listed as supported. This service returns two components, a PKCS8 containing the private key mat= erial and a PKCS7 containing the device certificate chain. In RFC7030, this information is returned using a Content-Type: multipart/mi= xed. How this is supported in "draft-vanderstok-core-coap-est-00"? REQ: POST /.well-known/est/serverkeygen (Content-Format: application/p= kcs10) // Certificate request carry in a PKCS10 =20 RES: 2.05 Content (Content-Format: ???) // Private key material for this node car= ry in a PKCS8 // Certificate and associated PKI for thi= s node carry in a PKCS7 Regards, Michel -----Original Message----- From: core [mailto:core-bounces@ietf.org] On Behalf Of peter van der Stok Sent: Saturday, October 29, 2016 11:12 AM To: Anima-bootstrap ; Core Subject: [core] Fwd: New Version Notification for draft-vanderstok-core-coa= p-est-00.txt Dear all, we have submitted a new draft Enrollment over Secure Transport (EST) over = coaps to make BRSKI over coap possible. We expect (parts of) this draft to be integrated with coap-bootstrap draft = of pritikin and Kampanakis. This draft removes EST functionality not absolutely needed within the conte= xt we expect the BRSKI deployment for low-resource devices. Greetings, Peter -------- Oorspronkelijke bericht -------- Onderwerp: New Version Notification for draft-vanderstok-core-coap-est-00.t= xt Datum: 2016-10-29 17:04 Afzender: internet-drafts@ietf.org Ontvanger: "Peter van der Stok" , "Peter Van de= r Stok" , "Sandeep Kumar"=20 , "Sandeep S. Kumar" A new version of I-D, draft-vanderstok-core-coap-est-00.txt has been successfully submitted by Peter van der Stok and posted to the IET= F repository. Name: draft-vanderstok-core-coap-est Revision: 00 Title: EST based on DTLS secured CoAP (EST-coaps) Document date: 2016-10-29 Group: Individual Submission Pages: 15 URL: =20 https://www.ietf.org/internet-drafts/draft-vanderstok-core-coap-est-00.txt Status: =20 https://datatracker.ietf.org/doc/draft-vanderstok-core-coap-est/ Htmlized: =20 https://tools.ietf.org/html/draft-vanderstok-core-coap-est-00 Abstract: Low-resource devices in a Low-power and Lossy Network (LLN) can operate in a mesh network using the IPv6 over Low-power Personal Area Networks (6LoWPAN) and IEEE 802.15.4 link-layer standards. Provisioning these devices in a secure manner with keys (often called security bootstrapping) used to encrypt and authenticate messages is the subject of Bootstrapping of Remote Secure Key Infrastructures (BRSKI) [I-D.ietf-anima-bootstrapping-keyinfra]. Enrollment over Secure Transport (EST) [RFC7030], based on TLS and HTTP, is used for BRSKI. This document defines how low-resource devices are expected to use EST over DTLS and CoAP. 6LoWPAN fragmentation management and minor extensions to CoAP are needed to enable EST over DTLS-secured CoAP (EST-coaps). Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat _______________________________________________ core mailing list core@ietf.org https://www.ietf.org/mailman/listinfo/core From nobody Tue Nov 1 08:55:13 2016 Return-Path: X-Original-To: anima-bootstrap@ietfa.amsl.com Delivered-To: anima-bootstrap@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DD43129460; Tue, 1 Nov 2016 08:55:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 85AuawNi3OBd; Tue, 1 Nov 2016 08:55:09 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DC815129AB2; Tue, 1 Nov 2016 08:55:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uA1Ft0MX002818; Tue, 1 Nov 2016 16:55:00 +0100 (CET) Received: from nar-4.local.mail (p5DC7E34C.dip0.t-ipconnect.de [93.199.227.76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3t7bQq70dLz7xmx; Tue, 1 Nov 2016 16:54:59 +0100 (CET) Date: Tue, 1 Nov 2016 16:34:25 +0100 From: Carsten Bormann To: Michel Veillette , "=?utf-8?Q?consultancy=40vanderstok.org?=" , Anima-bootstrap , Core Message-ID: In-Reply-To: References: <147775346922.30618.14590857285848221161.idtracker@ietfa.amsl.com> X-Mailer: Airmail (390) MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="5818bad3_28ba0ee2_9528" Archived-At: Subject: Re: [Anima-bootstrap] [core] Fwd: New Version Notification for draft-vanderstok-core-coap-est-00.txt X-BeenThere: anima-bootstrap@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Mailing list for the bootstrap design team of the ANIMA WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Nov 2016 15:55:12 -0000 --5818bad3_28ba0ee2_9528 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Sending around MIME messages between constrained devices doesn=E2=80=99t = strike me as the optimal way forward. =46ortunately, we have COSE, which would be an easy way to combine a key = wrap with some signing info. Gr=C3=BC=C3=9Fe, Carsten On 1 November 2016 at 16:30:43, Michel Veillette (michel.veillette=40tril= liantinc.com) wrote: Hi Peter =20 In section 3 of =22draft-vanderstok-core-coap-est-00=22, =22Server-genera= ted key=22 is listed as supported. =20 This service returns two components, a PKCS8 containing the private key m= aterial and a PKCS7 containing the device certificate chain. =20 In R=46C7030, this information is returned using a Content-Type: multipar= t/mixed. =20 How this is supported in =22draft-vanderstok-core-coap-est-00=22=3F =20 REQ: POST /.well-known/est/serverkeygen (Content-=46ormat: application/pk= cs10) =20 // Certificate request carry in a PKCS10 =20 RES: 2.05 Content (Content-=46ormat: =3F=3F=3F) =20 // Private key material for this node carry in a PKCS8= =20 // Certificate and associated PKI for this node carry= in a PKCS7 =20 Regards, =20 Michel =20 -----Original Message----- =20 =46rom: core =5Bmailto:core-bounces=40ietf.org=5D On Behalf Of peter van = der Stok =20 Sent: Saturday, October 29, 2016 11:12 AM =20 To: Anima-bootstrap ; Core = =20 Subject: =5Bcore=5D =46wd: New Version Notification for draft-vanderstok-= core-coap-est-00.txt =20 Dear all, =20 we have submitted a new draft Enrollment over Secure Transport (EST) over= coaps to make BRSKI over coap possible. =20 We expect (parts of) this draft to be integrated with coap-bootstrap draf= t of pritikin and Kampanakis. =20 This draft removes EST functionality not absolutely needed within the con= text we expect the BRSKI deployment for low-resource devices. =20 Greetings, =20 Peter =20 -------- Oorspronkelijke bericht -------- =20 Onderwerp: New Version Notification for draft-vanderstok-core-coap-est-00= .txt =20 Datum: 2016-10-29 17:04 =20 Afzender: internet-drafts=40ietf.org =20 Ontvanger: =22Peter van der Stok=22 , =22Pe= ter Van der Stok=22 , =22Sandeep Kumar=22 =20 , =22Sandeep S. Kumar=22 =20 A new version of I-D, draft-vanderstok-core-coap-est-00.txt =20 has been successfully submitted by Peter van der Stok and posted to the I= ET=46 repository. =20 Name: draft-vanderstok-core-coap-est =20 Revision: 00 =20 Title: EST based on DTLS secured CoAP (EST-coaps) =20 Document date: 2016-10-29 =20 Group: Individual Submission =20 Pages: 15 =20 URL: =20 https://www.ietf.org/internet-drafts/draft-vanderstok-core-coap-est-00.tx= t =20 Status: =20 https://datatracker.ietf.org/doc/draft-vanderstok-core-coap-est/ =20 Htmlized: =20 https://tools.ietf.org/html/draft-vanderstok-core-coap-est-00 =20 Abstract: =20 Low-resource devices in a Low-power and Lossy Network (LLN) can =20 operate in a mesh network using the IPv6 over Low-power Personal Area =20 Networks (6LoWPAN) and IEEE 802.15.4 link-layer standards. =20 Provisioning these devices in a secure manner with keys (often called =20 security bootstrapping) used to encrypt and authenticate messages is =20 the subject of Bootstrapping of Remote Secure Key Infrastructures =20 (BRSKI) =5BI-D.ietf-anima-bootstrapping-keyinfra=5D. Enrollment over =20 Secure Transport (EST) =5BR=46C7030=5D, based on TLS and HTTP, is used fo= r =20 BRSKI. This document defines how low-resource devices are expected =20 to use EST over DTLS and CoAP. 6LoWPAN fragmentation management and =20 minor extensions to CoAP are needed to enable EST over DTLS-secured =20 CoAP (EST-coaps). =20 Please note that it may take a couple of minutes from the time of submiss= ion until the htmlized version and diff are available at tools.ietf.org. = =20 The IET=46 Secretariat =20 =5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F= =5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F =20 core mailing list =20 core=40ietf.org =20 https://www.ietf.org/mailman/listinfo/core =20 =5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F= =5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F =20 core mailing list =20 core=40ietf.org =20 https://www.ietf.org/mailman/listinfo/core =20 --5818bad3_28ba0ee2_9528 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline