[Pki-devel] [PATCH] 0010..0013 DNP3/IECUserRoles extension support

Fraser Tweedale ftweedal at redhat.com
Thu Aug 14 06:21:57 UTC 2014


Here is the first (rough) cut of IEC 62351-8 (IECUserRoles)
extension support and a DNP3 profile that makes use of it.  This is
to meet (some of) the PKI needs for the "Smart Grid" DNP3 Secure
Authentication v5 (SAv5) standard.

In brief, the SN and all the IECUserRoles params will be given in
profile inputs, and the key is taken from a CertReqInput.

There's still a bit of work to go - notably, some of the
IECUserRoles fields are unimplemented, and some of those that *are*
implemented are not yet read out of the profile input but rather are
hardcoded.  The extension *does* appear on the certificate, so I
should get that all completed tomorrow.

Cheers,

Fraser




More information about the Pki-devel mailing list