make better references to examples for JWS and CBOR encoding

Makefile

@@ -3,6 +3,9 @@ CWTSIDDATE1=ietf-voucher@${YANGDATE}.sid
 CWTSIDLIST1=ietf-voucher-sid.txt
 CWTSIDDATE2=ietf-voucher-request@${YANGDATE}.sid
 CWTSIDLIST2=ietf-voucher-request-sid.txt
+EXAMPLES+=$(wildcard examples/voucher*.b64)
+EXAMPLES+=$(wildcard examples/*.pem)
+EXAMPLES+=$(wildcard examples/*.crt)
 LIBDIR := lib
 
 # add this path because your local install might be newer.
@@ -28,7 +31,7 @@ endif
 draft-ietf-anima-rfc8366bis.xml:: yang/ietf-voucher@${YANGDATE}.yang \
 	yang/ietf-voucher-tree-latest.txt \
 	yang/ietf-voucher-request@${YANGDATE}.yang \
-	yang/ietf-voucher-request-tree-latest.txt ${CWTSIDLIST1} ${CWTSIDLIST2}
+	yang/ietf-voucher-request-tree-latest.txt ${CWTSIDLIST1} ${CWTSIDLIST2} ${EXAMPLES}
 
 yang/ietf-voucher@${YANGDATE}.yang: ietf-voucher.yang
 	# make sure we are running a new enough pyang

draft-ietf-anima-rfc8366bis.md

@@ -388,10 +388,10 @@ There are some difficulties with this approach: this document does not attempt t
 
 Three signature systems have been defined for vouchers and voucher-requests.
 
-{{!I-D.ietf-anima-constrained-voucher}} defines a mechanism that uses COSE {{RFC9052}}, with the voucher data encoded using {{I-D.ietf-core-sid}}.
+{{!cBRSKI}} defines a mechanism that uses COSE {{RFC9052}}, with the voucher data encoded using {{I-D.ietf-core-sid}}.
 However, as the SID processe requires up-to-date YANG, the SID values for this mechanism are presented in this document.
 
-{{!I-D.ietf-anima-jws-voucher}} defines a mechanism that uses JSON {{RFC8259}} and {{JWS}}.
+{{!jBRSKI}} defines a mechanism that uses JSON {{RFC8259}} and {{JWS}}.
 
 The CMS mechanism first defined in {{RFC8366}} continues to be defined here.
 
@@ -523,6 +523,8 @@ using the 'verified' assertion type, which should satisfy all pledges.
 }
 ~~~~
 
+{{jBRSKI, Section 8}} contains examples of vouchers encoded in JSON, and signed with {{JWS}}.
+{{cBRSKI, Section 9}} contains examples of vouchers encoded in CBOR, and signed with {{COSE}}.
 
 ## YANG Module {#voucher-yang-module}
 
@@ -542,10 +544,14 @@ It is believed, however, that they will not change.
 {::include-fold ietf-voucher-sid.txt}
 ~~~~
 
-The "assertion" attribute is an enumerated type {{RFC8366}}, and the current PYANG tooling does not document the valid values for this attribute.
+The "assertion" attribute is an enumerated type in {{RFC8366}}, but no values were provided as part of the enumeration.
+This document provides enumerated values as part of the YANG module.
+
 In the JSON serialization, the literal strings from the enumerated types are used so there is no ambiguity.
-In the CBOR serialization, a small integer is used.
-This following values are documented here, but the YANG module should be considered authoritative. No IANA registry is provided or necessary because the YANG module (and this document) would be extended when there are new entries to make.
+
+In the CBOR serialization, a small integer is used, and the following values are repeated here.
+The YANG module should be considered authoritative in the future.
+No IANA registry is provided or necessary because the YANG module (and this document) would be extended when there are new entries to make.
 
 Integer  | Assertion Type
 |-|-|
@@ -781,6 +787,61 @@ This registration should be updated to point to this document.
 
 --- back
 
+# Examples
+
+## Key pairs associated with examples
+
+The following voucher request has been produced using the IDevID public (certificate) and private key.
+They are included so that other developers can match the same output.
+
+The private RSA key:
+
+~~~~
+{::include-fold examples/00-D0-E5-F2-00-02.pem}
+~~~~
+
+The IDevID certificate (public key):
+
+~~~~
+{::include-fold examples/00-D0-E5-F2-00-02.crt}
+~~~~
+
+The Certification Authority that created the IDevID:
+
+~~~~
+{::include-fold examples/vendor-00-D0-E5-F2-00-02.crt}
+~~~~
+
+The private key for the Certification Authority that created the IDevID:
+
+~~~~
+{::include-fold examples/vendor-00-D0-E5-F2-00-02.pem}
+~~~~
+
+The MASA certificate that signs the voucher:
+
+~~~~
+{::include-fold examples/masa-00-D0-E5-F2-00-02.crt}
+~~~~
+
+The private key for MASA certificate signs the voucher:
+
+~~~~
+{::include-fold examples/masa-00-D0-E5-F2-00-02.pem}
+~~~~
+
+## Example CMS signed voucher request
+
+~~~~
+{::include-fold examples/vr_00-D0-E5-F2-00-02.b64}
+~~~~
+
+## Example CMS signed voucher from MASA
+
+~~~~
+{::include-fold examples/voucher_00-D0-E5-F2-00-02.b64}
+~~~~
+
 # Acknowledgements
 {: numbered="no"}
 

examples/00-D0-E5-F2-00-02.crt

@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

examples/00-D0-E5-F2-00-02.pem

@@ -0,0 +1,5 @@
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIBHNh6r8QRevRuo+tEmBJeFjQKf6bpFA/9NGoltv+9sNoAoGCCqGSM49
+AwEHoUQDQgAEA6N1Q4ezfMAKmoecrfb0OBMc1AyEH+BATkF58FsTSyBxs0SbSWLx
+FjDOuwB9gLGn2TsTUJumJ6VPw5Z/TP4hJw==
+-----END EC PRIVATE KEY-----

examples/Makefile

@@ -0,0 +1,23 @@
+.SUFFIXES: .vrq .b64 .diag .vch
+
+all:    vr_00-D0-E5-F2-00-02.b64 voucher_00-D0-E5-F2-00-02.b64
+
+%.b64:  %.vch
+	base64 -w 60 $< >$@
+
+%.b64:  %.pkcs
+	base64 -w 60 $< >$@
+
+update:
+	cp /ssw/projects/pandora/reach/spec/files/product/00-D0-E5-F2-00-02/voucher_00-D0-E5-F2-00-02.pkcs .
+	cp /ssw/projects/pandora/reach/spec/files/product/00-D0-E5-F2-00-02/vr_00-D0-E5-F2-00-02.pkcs .
+	cp /ssw/projects/pandora/reach/spec/files/product/00-D0-E5-F2-00-02/key.pem 00-D0-E5-F2-00-02.pem
+	cp /ssw/projects/pandora/reach/spec/files/product/00-D0-E5-F2-00-02/device.crt 00-D0-E5-F2-00-02.crt
+	cp /ssw/projects/pandora/reach/spec/files/product/00-D0-E5-F2-00-02/masa.crt masa-00-D0-E5-F2-00-02.crt
+	cp /ssw/projects/pandora/reach/spec/files/product/00-D0-E5-F2-00-02/vendor.crt vendor-00-D0-E5-F2-00-02.crt
+	cp /ssw/projects/pandora/highway/spec/files/cert/vendor_3072.key vendor-00-D0-E5-F2-00-02.pem
+	cp /ssw/projects/pandora/highway/spec/files/cert/masa_prime256v1.key masa-00-D0-E5-F2-00-02.pem
+	cp /ssw/projects/pandora/highway/spec/files/cert/masa_prime256v1.crt masa-00-D0-E5-F2-00-02.crt
+	# if this fails, then the example needs to be renerated.
+	diff /ssw/projects/pandora/highway/spec/files/cert/vendor_3072.crt vendor-00-D0-E5-F2-00-02.crt
+

examples/README.md

@@ -0,0 +1,10 @@
+Files in this directory have been contributed from the following projects:
+    * https://minerva.sandelman.ca aka https://github.com/ANIMAgus-minerva/reach
+
+
+1. Files with the extension .pem are private keys.
+2. Files with the extension .crt are certificates.
+3. Files with the pattern voucher_*.pkcs are Voucher objects in CMS format
+4. Files with the pattern vr_*.pkcs are are Voucher Request objects in CMS format
+
+

examples/masa-00-D0-E5-F2-00-02.crt

@@ -0,0 +1,10 @@
+-----BEGIN CERTIFICATE-----
+MIIBcDCB9qADAgECAgQLhwoxMAoGCCqGSM49BAMCMCYxJDAiBgNVBAMMG2hpZ2h3
+YXktdGVzdC5leGFtcGxlLmNvbSBDQTAeFw0yMTA0MTMyMTQwMTZaFw0yMzA0MTMy
+MTQwMTZaMCgxJjAkBgNVBAMMHWhpZ2h3YXktdGVzdC5leGFtcGxlLmNvbSBNQVNB
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEqgQVo0S54kT4yfkbBxumdHOcHrps
+qbOpMKmiMln3oB1HAW25MJV+gqi4tMFfSJ0iEwt8kszfWXK4rLgJS2mnpaMQMA4w
+DAYDVR0TAQH/BAIwADAKBggqhkjOPQQDAgNpADBmAjEArsthLdRcjW6GqgsGHcbT
+YLoyczYl0yOFSYcczpQjeRqeQVUkHRUioUi7CsCrPBNzAjEAhjxns5Wi4uX5rfkd
+nME0Mnj1z+rVRwOfAL/QWctRwpgEgSSKURNQsXWyL52otPS5
+-----END CERTIFICATE-----

examples/masa-00-D0-E5-F2-00-02.pem

@@ -0,0 +1,5 @@
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIFhdd0eDdzip67kXx72K+KHGJQYJHNy8pkiLJ6CcvxMGoAoGCCqGSM49
+AwEHoUQDQgAEqgQVo0S54kT4yfkbBxumdHOcHrpsqbOpMKmiMln3oB1HAW25MJV+
+gqi4tMFfSJ0iEwt8kszfWXK4rLgJS2mnpQ==
+-----END EC PRIVATE KEY-----

examples/vendor-00-D0-E5-F2-00-02.crt

@@ -0,0 +1,99 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1016146354 (0x3c9129b2)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN = highway-test.example.com CA
+        Validity
+            Not Before: Apr  5 19:36:57 2021 GMT
+            Not After : May  6 05:36:57 2021 GMT
+        Subject: CN = highway-test.example.com CA
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (3072 bit)
+                Modulus:
+                    00:b4:7b:27:42:49:9f:ed:85:47:74:ff:f6:50:cd:
+                    5d:22:1a:64:38:22:f8:09:d2:d6:f3:60:d8:98:7f:
+                    e5:84:52:1e:d9:ce:96:b4:dc:a6:43:74:67:27:d9:
+                    9d:42:7d:bf:1a:43:92:9b:d1:dd:34:9b:41:d2:e3:
+                    d5:59:b3:40:fc:b3:c9:e1:58:84:3f:87:f7:06:45:
+                    25:26:4c:bf:a1:45:72:a0:0a:5b:86:41:d7:8e:be:
+                    d3:38:b5:aa:66:69:bd:3a:fd:e9:b5:b8:a2:79:c4:
+                    f0:a5:3c:9e:91:94:32:1e:9c:b0:7f:25:46:5b:76:
+                    1d:86:23:85:b0:62:45:5c:a8:6f:fb:c5:26:e1:dd:
+                    a8:f2:68:ab:c5:8c:b4:58:b4:2e:96:49:fa:fe:d2:
+                    ea:a5:11:68:c2:8d:f4:58:ab:30:bd:dd:1b:29:97:
+                    00:18:6f:59:40:9c:3a:2a:e4:96:25:bb:12:f4:1a:
+                    11:72:6d:31:f6:b4:e1:cc:d8:9a:0c:aa:a8:aa:a4:
+                    64:e3:f1:06:1c:c0:09:df:62:ba:04:cb:70:b0:c4:
+                    f7:ca:35:22:ea:a9:c7:52:e1:ce:27:fb:6c:52:39:
+                    b7:22:b3:5d:97:cb:0a:9f:75:a3:af:16:ef:e6:b2:
+                    1b:6a:c3:0b:1d:15:fd:b8:d8:e7:8a:f6:f4:99:1c:
+                    23:97:4b:80:e9:79:a3:85:16:f8:dd:bd:77:ef:3a:
+                    3c:8e:e7:75:56:67:36:3a:dd:42:7b:84:2f:64:2f:
+                    13:0e:fa:b0:3b:11:13:7e:ae:78:a6:2f:46:dd:4b:
+                    11:88:e4:7b:19:ab:21:2d:1f:34:ba:61:cd:51:84:
+                    a5:ec:6a:c1:90:20:70:e3:aa:f4:01:fd:0c:6e:cd:
+                    04:47:99:31:70:79:6c:af:41:78:c1:04:2a:43:78:
+                    84:8a:fe:c3:3d:f2:41:c8:2a:a1:10:e0:b7:b4:4f:
+                    4e:e6:26:79:ac:49:64:cf:57:1e:2e:e3:2f:58:bd:
+                    6f:30:00:67:d7:8b:d6:13:60:bf
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Subject Key Identifier: 
+                33:12:45:B7:1B:10:BE:F3:CB:64:E5:4C:50:80:7C:9D:88:65:74:40
+            X509v3 Authority Key Identifier: 
+                33:12:45:B7:1B:10:BE:F3:CB:64:E5:4C:50:80:7C:9D:88:65:74:40
+    Signature Algorithm: sha256WithRSAEncryption
+    Signature Value:
+        05:37:28:85:37:39:71:87:ec:5c:f0:51:19:55:4a:b7:e0:2a:
+        e6:61:30:d4:e2:2b:ad:7a:db:12:fc:8a:a6:6e:15:82:80:10:
+        fa:5d:67:60:e8:54:14:e3:89:d6:4e:60:89:98:5b:ab:fe:32:
+        26:aa:02:35:68:4e:c6:2e:ce:08:36:d1:ea:a0:97:3d:76:38:
+        6e:9d:4b:6f:33:d2:fa:c2:7e:b0:59:bc:75:97:17:d1:1b:c5:
+        c4:58:ae:7b:7e:87:e5:87:2b:8b:6b:10:16:70:7c:c8:65:c7:
+        d0:62:5d:f3:b5:06:af:03:8b:32:dd:88:f0:07:2b:5d:61:58:
+        61:35:54:a6:ce:95:81:a2:6e:fa:b5:aa:25:e1:41:53:9d:e7:
+        4b:7e:93:88:79:6b:dd:a3:6e:9a:0d:bd:85:b4:2d:66:b9:cc:
+        01:13:f1:b5:d5:91:cc:86:5e:a7:c8:4a:8f:4d:9d:f8:17:31:
+        32:7d:50:d5:c2:79:a0:41:a0:69:83:33:16:14:35:26:10:3b:
+        23:eb:60:d9:28:68:99:d5:55:61:89:b5:35:5d:8b:fe:b1:96:
+        32:69:3e:8b:c2:a2:4e:e1:d8:76:04:3c:87:91:5d:66:9e:81:
+        a5:bf:18:2e:3e:39:da:4f:68:57:46:d2:1d:aa:81:51:3b:33:
+        72:da:e9:7d:12:b6:a1:fc:c7:1d:c1:9c:bd:92:e8:1b:d2:06:
+        e8:0b:82:2a:4f:23:5a:7a:fa:7b:86:a0:d7:c1:46:e7:04:47:
+        77:11:cd:da:7c:50:32:d2:6f:fd:1e:0a:df:cf:b1:20:d2:86:
+        ce:40:5a:27:61:49:2f:71:f5:04:ac:eb:c6:03:70:a4:70:13:
+        4a:af:41:35:83:dc:55:c0:29:7f:12:4f:d0:f1:bb:f7:61:4a:
+        9f:8d:61:b0:5e:89:46:49:e3:27:8b:42:82:5e:af:14:d5:d9:
+        91:69:3d:af:11:70:5b:a3:92:3b:e3:c8:2a:a4:38:e5:88:f2:
+        6f:09:f4:e5:04:3b
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

examples/vendor-00-D0-E5-F2-00-02.pem

@@ -0,0 +1,39 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

examples/voucher_00-D0-E5-F2-00-02.b64

@@ -0,0 +1,36 @@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