1 karl  1.1.2.2 // Copyright (c) 2011 DMTF.  All rights reserved.
 2                  [Version ( "2.29.0" ), 
 3                   ClassConstraint { 
 4                      "/* The constraints below aim to efficiently */  /* represent a singular OctetString. Each of the properties*/  /* is a single encoded string, thus only the first element */  /* needs to be populated. */ inv:self.TBSCertificate->size()<=1" }, 
 5                   UMLPackagePath ( "CIM::User::PublicKey" ), 
 6                   Description ( 
 7                      "CIM_X509Infrastructure describes Internet X509 Public Key "
 8                      "Infrastructure (PKI) standard based properties used by "
 9                      "certificates and certificate revocation lists. For more "
10                      "information on the Internet X509 PKI refer to the RFC 3280." )]
11               class CIM_X509Infrastructure : CIM_SignedCredential {
12               
13                     [Description ( "Version of X.509." ), 
14                      ValueMap { "0", "2", "3", "4", "..", "32768..65535" }, 
15                      Values { "Unknown", "v1", "v2", "v3", "DMTF Reserved", 
16                         "Vendor Specified" }, 
17                      MappingStrings { "RFC3280.IETF|Section 4.1.2.1", 
18                         "RFC3280.IETF|Section 5.1.2.1" }]
19                  uint16 Version;
20               
21                     [Description ( 
22 karl  1.1.2.2           "The To Be Signed (TBS) certificate is used as an input "
23                         "data to the signature algorithm when the certificate is "
24                         "signed or verified. Only the first element of the array "
25                         "property shall be populated." ), 
26                      OctetString, MappingStrings { "RFC3280.IETF|Section 4.1.2", 
27                         "RFC3280.IETF|Section 5.1.2" }]
28                  string TBSCertificate[];
29               
30                     [Description ( 
31                         "Digital signature algorithm that verifies data integrity "
32                         "by creating a 128-bit message digest or fingerprint. The "
33                         "fingerprint is unique to the input data and contains the "
34                         "binary hash of the encoded X509 object such as encoded "
35                         "certificate or CRL." ), 
36                      OctetString]
37                  string MD5Fingerprint[];
38               
39                     [Description ( 
40                         "Secure hashing algorithm, a cryptographic message digest "
41                         "algorithm used to verify data integrity by making "
42                         "replication of the fingerprint. The fingerprint is "
43 karl  1.1.2.2           "unique to the input data and contains the binary hash of "
44                         "the encoded X509 object such as encoded certificate or "
45                         "CRL." ), 
46                      OctetString]
47                  string SHA1Fingerprint[];
48               
49                     [Description ( 
50                         "The algorithm used for hashing the encoded X509 "
51                         "certificate\'s or CRL\'s message digest represented in "
52                         "the corresponding element of the FingerPrint array." ), 
53                      ValueMap { "2", "3", "..", "32768..65535" }, 
54                      Values { "MD5", "SHA1", "DMTF Reserved", "Vendor Specified" }, 
55                      ArrayType ( "Indexed" ), 
56                      ModelCorrespondence { "CIM_X509Infrastructure.Fingerprints" }]
57                  uint16 FingerprintDigestAlgorithms[];
58               
59                     [Description ( 
60                         "Fingerprints property represents the message digests of "
61                         "the encoded X509 certificate or CRL that uniquely "
62                         "identify it and can be used for the integrity "
63                         "verification of the X509 certificate or CRL. Fingerprint "
64 karl  1.1.2.2           "is the hash of the encoded X509 certificate or CRL that "
65                         "is based on the algorithm described in the corresponding "
66                         "element of the FingerprintDigestAlgorithms array." ), 
67                      OctetString, ArrayType ( "Indexed" ), 
68                      ModelCorrespondence { 
69                         "CIM_X509Infrastructure.FingerprintDigestAlgorithms" }]
70                  string Fingerprints[];
71               
72                     [Override ( "IssuerName" ), 
73                      Description ( 
74                         "Issuer represents the information about the issuer of "
75                         "the CRL. The Issuer property shall contain information "
76                         "as required by section 4.1.2.4 of RFC 3280 and shall be "
77                         "formatted based on RFC 4514. An example of the value of "
78                         "the Subject parameter could be \"CN=Marshall T. Rose, "
79                         "O=Dover Beach Consulting, OU=Sales, L=Santa Clara, "
80                         "ST=California, C=US\"." ), 
81                      DN, MappingStrings { "RFC3280.IETF|Section 4.1.2.4", 
82                         "RFC3280.IETF|Section 5.1.2.3" }]
83                  string IssuerName;
84               
85 karl  1.1.2.2 
86               };