1. LDAP PKI and PMI Schemas
TrustCoM Project
LDAP PKI and PMI Schemas
4 Aug 2004
TrustCoM Project University of Salford

2. TrustCoM Project University of Salford
3 IDs in the series
Internet X.509 Public Key Infrastructure LDAP Schema for X.509 CRLs <draft-ietf-pkix-ldap-crl-schema-02.txt>
Internet X.509 Public Key Infrastructure
LDAP Schema for X.509 Attribute Certificates
<draft-ietf-pkix-ldap-ac-schema-01.txt>
LDAP Schema for X.509 Certificates <draft-ietf-pkix-ldap-pkc-schema-00
ALL DESTINED FOR INFORMATIONAL RFCS
4 Aug 2004
TrustCoM Project University of Salford

3. TrustCoM Project University of Salford
Attribute Extraction
LDAP
directory
[ ]
XPS
server +
Search for Att 1.. Att i
Return X.509 attribute
Att1, Att2…Att n
CA/AA
4 Aug 2004
TrustCoM Project University of Salford

4. TrustCoM Project University of Salford
The DIT Structure
PKCs and ACs are held in child entries
CRLs are held in child subtrees
dc=com
dc=myorg
dc=com
dc=myorg
ou=My CA
ou=people
CRL
AC containing roles
cn=my entry
Encryption PKC
CRL entries
Signing PKC
serialno=nnnn + issuer=‘ou=MyCA,dc=myorg,dc=com’
4 Aug 2004
TrustCoM Project University of Salford

5. Implementation Details
Implemented in OpenLDAP and newer
Code is not in the main branch yet since it's being reviewed by OpenLDAP programmers
4 Aug 2004
TrustCoM Project University of Salford

6. TrustCoM Project University of Salford
LDAP Client view of XPS
4 Aug 2004
TrustCoM Project University of Salford

7. TrustCoM Project University of Salford
Way Forward
Latest versions
Added IANA considerations and acks, re-arranged object classes, aligned all 3 IDs, minor corrections
Outstanding Issues
None
WG Last Call ?? Is it needed for an Inf RFC
Ready to go now
4 Aug 2004
TrustCoM Project University of Salford

8. TrustCoM Project University of Salford
Other LDAP work
V3 Profile
4 Aug 2004
TrustCoM Project University of Salford