view release on metacpan or  search on metacpan

lib/Crypt/OpenSSL/CA/Resources.pod  view on Meta::CPAN

L<http://www.cs.auckland.ac.nz/~pgut001/> contains more crypto- and
security-related stuff, and is always a pleasure to waste office time
reading from.

=head2 alvestrand.no

=head2 oid.elibel.tm.fr

L<http://www.alvestrand.no/objectid/> and L<http://oid.elibel.tm.fr/>
are both databases of L<Crypt::OpenSSL::CA::AlphabetSoup/OID>s that
together contain pretty much all OIDs known to mankind.  The latter
sports a search engine.

=head1 STANDARDS

The RFCs and other standards describing PKIX (the X509 PKI) are, in
suggested reading order:

=over

=item B<RFC4210>

Basics, security model, definition of the entities (EE, RA, CA),
format of messages between these entities (that nobody in his right
mind would bother to implement in this contrived way).

=item B<RFC4514>

Distinguished Names (L<Crypt::OpenSSL::CA::AlphabetSoup/DN>)

=item B<RFC3280>

Certificate and CRL formats, extensions in certificates, certificate
validation algorithm.

=item B<RFC3279>

How one should set the C<keyUsage> bits in an X509 certificate.

=item B<PKCS10>

Certificate request file format - One of the most popular ones (the
great thing about standards, as the saying goes, is that there are so
many to choose from...)

=item B<SPKAC>

The other certificate request file format of importance to an Internet
PKIX deployment
(L<http://wp.netscape.com/eng/security/ca-interface.html>).  Used by
all browsers of the Netscape family.

=item L<http://wp.netscape.com/eng/security/comm4-cert-exts.html>

The specification of the Netscape certificate type X509v3 extension.
Mostly obsolete, but it does make your certificates all that more
christmas-treeish.

=item B<PKCS12>

A transport and backup format for X509 key material. Allows for
bundling a user's certificate, its matching private key
(password-protected), and the chain of CA certificates and CRLs that
certify the user's certificate, all into a single binary blob.

=item B<RFC2560>

L<Crypt::OpenSSL::CA::AlphabetSoup/OCSP>

=item B<RFC3739>

Qualified certificates.

=back