0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews-- Copyright (C) The Internet Society 2005. This version of
28b863e609ff2d97b78663b46894494cfa2ea411Mark Andrews-- this module is part of RFC 4178; see the RFC itself for
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews-- full legal notices.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews-- (The above copyright notice is per RFC 3978 5.6 (a), q.v.)
28b863e609ff2d97b78663b46894494cfa2ea411Mark Andrews
70e5a7403f0e0a3bd292b8287c5fed5772c15270Automatic Updater-- $Id: spnego.asn1,v 1.2 2006/12/04 01:52:46 marka Exp $
28b863e609ff2d97b78663b46894494cfa2ea411Mark Andrews
28b863e609ff2d97b78663b46894494cfa2ea411Mark Andrews-- This is the SPNEGO ASN.1 module from RFC 4178, tweaked
28b863e609ff2d97b78663b46894494cfa2ea411Mark Andrews-- to get the Heimdal ASN.1 compiler to accept it.
28b863e609ff2d97b78663b46894494cfa2ea411Mark Andrews
28b863e609ff2d97b78663b46894494cfa2ea411Mark AndrewsSPNEGOASNOneSpec DEFINITIONS ::= BEGIN
28b863e609ff2d97b78663b46894494cfa2ea411Mark Andrews
28b863e609ff2d97b78663b46894494cfa2ea411Mark AndrewsMechType ::= OBJECT IDENTIFIER
28b863e609ff2d97b78663b46894494cfa2ea411Mark Andrews
28b863e609ff2d97b78663b46894494cfa2ea411Mark AndrewsMechTypeList ::= SEQUENCE OF MechType
28b863e609ff2d97b78663b46894494cfa2ea411Mark Andrews
28b863e609ff2d97b78663b46894494cfa2ea411Mark AndrewsContextFlags ::= BIT STRING {
delegFlag (0),
mutualFlag (1),
replayFlag (2),
sequenceFlag (3),
anonFlag (4),
confFlag (5),
integFlag (6)
}
NegTokenInit ::= SEQUENCE {
mechTypes [0] MechTypeList,
reqFlags [1] ContextFlags OPTIONAL,
mechToken [2] OCTET STRING OPTIONAL,
mechListMIC [3] OCTET STRING OPTIONAL
}
NegTokenResp ::= SEQUENCE {
negState [0] ENUMERATED {
accept-completed (0),
accept-incomplete (1),
reject (2),
request-mic (3)
} OPTIONAL,
supportedMech [1] MechType OPTIONAL,
responseToken [2] OCTET STRING OPTIONAL,
mechListMIC [3] OCTET STRING OPTIONAL
}
NegotiationToken ::= CHOICE {
negTokenInit [0] NegTokenInit,
negTokenResp [1] NegTokenResp
}
END