Re: [webauthn] Add packed attestation optional firmware version attribute (#1953)

Sure:

```
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16909060 (0x1020304)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN = Example attestation certificate
        Validity
            Not Before: Aug  1 00:00:00 2014 GMT
            Not After : Sep  4 00:00:00 2050 GMT
        Subject: C = US, O = WebAuthn WG, CN = Attestation example
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:79:ea:3b:2c:7c:49:70:10:62:23:0c:d2:3f:eb:
                    60:e5:29:31:71:d4:83:f1:00:be:85:9d:6b:0f:83:
                    97:03:01:b5:46:cd:d4:6e:cf:ca:e3:e3:f3:0f:81:
                    e9:ed:62:bd:26:8d:4c:1e:bd:37:b3:bc:be:92:a8:
                    c2:ae:eb:4e:3a
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            1.3.6.1.4.1.45724.1.1.4:
                ....9\&...e;.y}..<
            1.3.6.1.4.1.45724.1.1.5:
                ..*
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        97:9d:03:97:d8:60:f8:2e:e1:5d:31:1c:79:6e:ba:fb:22:fa:
        a7:e0:84:d9:ba:b4:c6:1b:bb:57:f3:e6:b4:c1:8a:48:37:b8:
        5c:3c:4e:db:e4:83:43:f4:d6:a5:d9:b1:ce:da:8a:e1:fe:d4:
        91:29:21:73:05:8e:5e:e1:cb:dd:6b:da:c0:75:57:c6:a0:e8:
        d3:68:25:ba:15:9e:7f:b5:ad:8c:da:f8:04:86:8c:f9:0e:8f:
        1f:8a:ea:17:c0:16:b5:5c:2a:7a:d4:97:c8:94:fb:71:d7:53:
        d7:9b:9a:48:4b:6c:37:6d:72:3b:99:8d:2e:1d:43:06:bf:10:
        33:b5:ae:f8:cc:a5:cb:b2:56:8b:69:24:22:6d:22:a3:58:ab:
        7d:87:e4:ac:5f:2e:09:1a:a7:15:79:f3:a5:69:09:49:7d:72:
        f5:4e:06:ba:c1:c3:b4:41:3b:ba:5e:af:94:c3:b6:4f:34:f9:
        eb:a4:1a:cb:6a:e2:83:77:6d:36:46:53:78:48:fe:e8:84:bd:
        dd:f5:b1:ba:57:98:54:cf:fd:ce:ba:c3:44:05:95:27:e5:6d:
        d5:98:f8:f5:66:71:5a:be:43:01:dd:19:11:30:e6:b9:f0:c6:
        40:39:12:53:e2:29:80:3f:3a:ef:27:4b:ed:bf:de:3f:cb:bd:
        42:ea:d6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
```

Though it occurred to me now that I haven't updated the signature, so the certificate as a whole is not valid (neither of these two, though I haven't checked if the example from @agl has a valid signature).

But are we going to include the whole certificate in the example? Currently we only have an example like the second listing in my [previous comment](https://github.com/w3c/webauthn/pull/1953#issuecomment-1740742591). For that example you can just omit the sernum part, the three sections are independent.

-- 
GitHub Notification of comment by emlun
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/1953#issuecomment-1758134692 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 11 October 2023 17:11:14 UTC