Added PKIXAttributeCertificate (RFC3281).

svn path=/trunk/; revision=32460

1 files changed, 836 insertions, 0 deletions

diff --git a/epan/dissectors/packet-pkixac.c b/epan/dissectors/packet-pkixac.c
new file mode 100755
index 0000000000..906202bf4b
--- /dev/null
+++ b/epan/dissectors/packet-pkixac.c
@@ -0,0 +1,836 @@
+/* Do not modify this file.                                                   */
+/* It is created automatically by the ASN.1 to Wireshark dissector compiler   */
+/* packet-pkixac.c                                                            */
+/* ../../tools/asn2wrs.py -b -p pkixac -c ./pkixac.cnf -s ./packet-pkixac-template -D . PKIXAttributeCertificate.asn */
+
+/* Input file: packet-pkixac-template.c */
+
+#line 1 "packet-pkixac-template.c"
+/* packet-pkixac.c
+ *
+ * Routines for PKIXAttributeCertificate (RFC3281) packet dissection.
+ * 
+ * Copyright 2010, Stig Bjorlykke <stig@bjorlykke.org>
+ *
+ * $Id$
+ *
+ * Wireshark - Network traffic analyzer
+ * By Gerald Combs <gerald@wireshark.org>
+ * Copyright 1998 Gerald Combs
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
+ */
+
+#ifdef HAVE_CONFIG_H
+# include "config.h"
+#endif
+
+#include <glib.h>
+#include <epan/packet.h>
+
+#include <stdio.h>
+#include <string.h>
+
+#include <epan/asn1.h>
+#include "packet-ber.h"
+#include "packet-pkixac.h"
+#include "packet-pkix1explicit.h"
+#include "packet-pkix1implicit.h"
+#include "packet-x509ce.h"
+
+#define PNAME  "PKIX Attribute Certificate"
+#define PSNAME "PKIXAC"
+#define PFNAME "pkixac"
+
+/* Initialize the protocol and registered fields */
+static int proto_pkixac = -1;
+
+/*--- Included file: packet-pkixac-hf.c ---*/
+#line 1 "packet-pkixac-hf.c"
+static int hf_pkixac_Targets_PDU = -1;            /* Targets */
+static int hf_pkixac_IetfAttrSyntax_PDU = -1;     /* IetfAttrSyntax */
+static int hf_pkixac_SvceAuthInfo_PDU = -1;       /* SvceAuthInfo */
+static int hf_pkixac_RoleSyntax_PDU = -1;         /* RoleSyntax */
+static int hf_pkixac_Clearance_PDU = -1;          /* Clearance */
+static int hf_pkixac_AAControls_PDU = -1;         /* AAControls */
+static int hf_pkixac_ProxyInfo_PDU = -1;          /* ProxyInfo */
+static int hf_pkixac_digestedObjectType = -1;     /* T_digestedObjectType */
+static int hf_pkixac_otherObjectTypeID = -1;      /* OBJECT_IDENTIFIER */
+static int hf_pkixac_digestAlgorithm = -1;        /* AlgorithmIdentifier */
+static int hf_pkixac_objectDigest = -1;           /* BIT_STRING */
+static int hf_pkixac_issuer = -1;                 /* GeneralNames */
+static int hf_pkixac_serial = -1;                 /* CertificateSerialNumber */
+static int hf_pkixac_issuerUID = -1;              /* UniqueIdentifier */
+static int hf_pkixac_Targets_item = -1;           /* Target */
+static int hf_pkixac_targetName = -1;             /* GeneralName */
+static int hf_pkixac_targetGroup = -1;            /* GeneralName */
+static int hf_pkixac_targetCert = -1;             /* TargetCert */
+static int hf_pkixac_targetCertificate = -1;      /* IssuerSerial */
+static int hf_pkixac_certDigestInfo = -1;         /* ObjectDigestInfo */
+static int hf_pkixac_policyAuthority = -1;        /* GeneralNames */
+static int hf_pkixac_values = -1;                 /* T_values */
+static int hf_pkixac_values_item = -1;            /* T_values_item */
+static int hf_pkixac_octets = -1;                 /* OCTET_STRING */
+static int hf_pkixac_oid = -1;                    /* OBJECT_IDENTIFIER */
+static int hf_pkixac_string = -1;                 /* UTF8String */
+static int hf_pkixac_service = -1;                /* GeneralName */
+static int hf_pkixac_ident = -1;                  /* GeneralName */
+static int hf_pkixac_authInfo = -1;               /* OCTET_STRING */
+static int hf_pkixac_roleAuthority = -1;          /* GeneralNames */
+static int hf_pkixac_roleName = -1;               /* GeneralName */
+static int hf_pkixac_policyId = -1;               /* OBJECT_IDENTIFIER */
+static int hf_pkixac_classList = -1;              /* ClassList */
+static int hf_pkixac_securityCategories = -1;     /* SET_OF_SecurityCategory */
+static int hf_pkixac_securityCategories_item = -1;  /* SecurityCategory */
+static int hf_pkixac_type = -1;                   /* T_type */
+static int hf_pkixac_value = -1;                  /* T_value */
+static int hf_pkixac_pathLenConstraint = -1;      /* INTEGER_0_MAX */
+static int hf_pkixac_permittedAttrs = -1;         /* AttrSpec */
+static int hf_pkixac_excludedAttrs = -1;          /* AttrSpec */
+static int hf_pkixac_permitUnSpecified = -1;      /* BOOLEAN */
+static int hf_pkixac_AttrSpec_item = -1;          /* OBJECT_IDENTIFIER */
+static int hf_pkixac_ProxyInfo_item = -1;         /* Targets */
+/* named bits */
+static int hf_pkixac_ClassList_unmarked = -1;
+static int hf_pkixac_ClassList_unclassified = -1;
+static int hf_pkixac_ClassList_restricted = -1;
+static int hf_pkixac_ClassList_confidential = -1;
+static int hf_pkixac_ClassList_secret = -1;
+static int hf_pkixac_ClassList_topSecret = -1;
+
+/*--- End of included file: packet-pkixac-hf.c ---*/
+#line 52 "packet-pkixac-template.c"
+
+/* Initialize the subtree pointers */
+static gint ett_pkixac = -1;
+
+/*--- Included file: packet-pkixac-ett.c ---*/
+#line 1 "packet-pkixac-ett.c"
+static gint ett_pkixac_ObjectDigestInfo = -1;
+static gint ett_pkixac_IssuerSerial = -1;
+static gint ett_pkixac_Targets = -1;
+static gint ett_pkixac_Target = -1;
+static gint ett_pkixac_TargetCert = -1;
+static gint ett_pkixac_IetfAttrSyntax = -1;
+static gint ett_pkixac_T_values = -1;
+static gint ett_pkixac_T_values_item = -1;
+static gint ett_pkixac_SvceAuthInfo = -1;
+static gint ett_pkixac_RoleSyntax = -1;
+static gint ett_pkixac_Clearance = -1;
+static gint ett_pkixac_SET_OF_SecurityCategory = -1;
+static gint ett_pkixac_ClassList = -1;
+static gint ett_pkixac_SecurityCategory = -1;
+static gint ett_pkixac_AAControls = -1;
+static gint ett_pkixac_AttrSpec = -1;
+static gint ett_pkixac_ProxyInfo = -1;
+
+/*--- End of included file: packet-pkixac-ett.c ---*/
+#line 56 "packet-pkixac-template.c"
+
+static const char *object_identifier_id;
+
+
+/*--- Included file: packet-pkixac-fn.c ---*/
+#line 1 "packet-pkixac-fn.c"
+
+static const value_string pkixac_T_digestedObjectType_vals[] = {
+  {   0, "publicKey" },
+  {   1, "publicKeyCert" },
+  {   2, "otherObjectTypes" },
+  { 0, NULL }
+};
+
+
+static int
+dissect_pkixac_T_digestedObjectType(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_integer(implicit_tag, actx, tree, tvb, offset, hf_index,
+                                  NULL);
+
+  return offset;
+}
+
+
+
+static int
+dissect_pkixac_OBJECT_IDENTIFIER(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_object_identifier(implicit_tag, actx, tree, tvb, offset, hf_index, NULL);
+
+  return offset;
+}
+
+
+
+static int
+dissect_pkixac_BIT_STRING(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_bitstring(implicit_tag, actx, tree, tvb, offset,
+                                    NULL, hf_index, -1,
+                                    NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t ObjectDigestInfo_sequence[] = {
+  { &hf_pkixac_digestedObjectType, BER_CLASS_UNI, BER_UNI_TAG_ENUMERATED, BER_FLAGS_NOOWNTAG, dissect_pkixac_T_digestedObjectType },
+  { &hf_pkixac_otherObjectTypeID, BER_CLASS_UNI, BER_UNI_TAG_OID, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_pkixac_OBJECT_IDENTIFIER },
+  { &hf_pkixac_digestAlgorithm, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_pkix1explicit_AlgorithmIdentifier },
+  { &hf_pkixac_objectDigest , BER_CLASS_UNI, BER_UNI_TAG_BITSTRING, BER_FLAGS_NOOWNTAG, dissect_pkixac_BIT_STRING },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_pkixac_ObjectDigestInfo(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   ObjectDigestInfo_sequence, hf_index, ett_pkixac_ObjectDigestInfo);
+
+  return offset;
+}
+
+
+static const ber_sequence_t IssuerSerial_sequence[] = {
+  { &hf_pkixac_issuer       , BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509ce_GeneralNames },
+  { &hf_pkixac_serial       , BER_CLASS_UNI, BER_UNI_TAG_INTEGER, BER_FLAGS_NOOWNTAG, dissect_pkix1explicit_CertificateSerialNumber },
+  { &hf_pkixac_issuerUID    , BER_CLASS_UNI, BER_UNI_TAG_BITSTRING, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_pkix1explicit_UniqueIdentifier },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_pkixac_IssuerSerial(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   IssuerSerial_sequence, hf_index, ett_pkixac_IssuerSerial);
+
+  return offset;
+}
+
+
+static const ber_sequence_t TargetCert_sequence[] = {
+  { &hf_pkixac_targetCertificate, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_pkixac_IssuerSerial },
+  { &hf_pkixac_targetName   , BER_CLASS_CON, -1/*choice*/, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_x509ce_GeneralName },
+  { &hf_pkixac_certDigestInfo, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_pkixac_ObjectDigestInfo },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_pkixac_TargetCert(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   TargetCert_sequence, hf_index, ett_pkixac_TargetCert);
+
+  return offset;
+}
+
+
+static const value_string pkixac_Target_vals[] = {
+  {   0, "targetName" },
+  {   1, "targetGroup" },
+  {   2, "targetCert" },
+  { 0, NULL }
+};
+
+static const ber_choice_t Target_choice[] = {
+  {   0, &hf_pkixac_targetName   , BER_CLASS_CON, 0, BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralName },
+  {   1, &hf_pkixac_targetGroup  , BER_CLASS_CON, 1, BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralName },
+  {   2, &hf_pkixac_targetCert   , BER_CLASS_CON, 2, BER_FLAGS_IMPLTAG, dissect_pkixac_TargetCert },
+  { 0, NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_pkixac_Target(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_choice(actx, tree, tvb, offset,
+                                 Target_choice, hf_index, ett_pkixac_Target,
+                                 NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t Targets_sequence_of[1] = {
+  { &hf_pkixac_Targets_item , BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_NOOWNTAG|BER_FLAGS_NOTCHKTAG, dissect_pkixac_Target },
+};
+
+static int
+dissect_pkixac_Targets(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
+                                      Targets_sequence_of, hf_index, ett_pkixac_Targets);
+
+  return offset;
+}
+
+
+
+static int
+dissect_pkixac_OCTET_STRING(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_octet_string(implicit_tag, actx, tree, tvb, offset, hf_index,
+                                       NULL);
+
+  return offset;
+}
+
+
+
+static int
+dissect_pkixac_UTF8String(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_restricted_string(implicit_tag, BER_UNI_TAG_UTF8String,
+                                            actx, tree, tvb, offset, hf_index,
+                                            NULL);
+
+  return offset;
+}
+
+
+static const value_string pkixac_T_values_item_vals[] = {
+  {   0, "octets" },
+  {   1, "oid" },
+  {   2, "string" },
+  { 0, NULL }
+};
+
+static const ber_choice_t T_values_item_choice[] = {
+  {   0, &hf_pkixac_octets       , BER_CLASS_UNI, BER_UNI_TAG_OCTETSTRING, BER_FLAGS_NOOWNTAG, dissect_pkixac_OCTET_STRING },
+  {   1, &hf_pkixac_oid          , BER_CLASS_UNI, BER_UNI_TAG_OID, BER_FLAGS_NOOWNTAG, dissect_pkixac_OBJECT_IDENTIFIER },
+  {   2, &hf_pkixac_string       , BER_CLASS_UNI, BER_UNI_TAG_UTF8String, BER_FLAGS_NOOWNTAG, dissect_pkixac_UTF8String },
+  { 0, NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_pkixac_T_values_item(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_choice(actx, tree, tvb, offset,
+                                 T_values_item_choice, hf_index, ett_pkixac_T_values_item,
+                                 NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t T_values_sequence_of[1] = {
+  { &hf_pkixac_values_item  , BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_NOOWNTAG|BER_FLAGS_NOTCHKTAG, dissect_pkixac_T_values_item },
+};
+
+static int
+dissect_pkixac_T_values(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
+                                      T_values_sequence_of, hf_index, ett_pkixac_T_values);
+
+  return offset;
+}
+
+
+static const ber_sequence_t IetfAttrSyntax_sequence[] = {
+  { &hf_pkixac_policyAuthority, BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralNames },
+  { &hf_pkixac_values       , BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_pkixac_T_values },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_pkixac_IetfAttrSyntax(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   IetfAttrSyntax_sequence, hf_index, ett_pkixac_IetfAttrSyntax);
+
+  return offset;
+}
+
+
+static const ber_sequence_t SvceAuthInfo_sequence[] = {
+  { &hf_pkixac_service      , BER_CLASS_CON, -1/*choice*/, BER_FLAGS_NOOWNTAG, dissect_x509ce_GeneralName },
+  { &hf_pkixac_ident        , BER_CLASS_CON, -1/*choice*/, BER_FLAGS_NOOWNTAG, dissect_x509ce_GeneralName },
+  { &hf_pkixac_authInfo     , BER_CLASS_UNI, BER_UNI_TAG_OCTETSTRING, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_pkixac_OCTET_STRING },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_pkixac_SvceAuthInfo(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   SvceAuthInfo_sequence, hf_index, ett_pkixac_SvceAuthInfo);
+
+  return offset;
+}
+
+
+static const ber_sequence_t RoleSyntax_sequence[] = {
+  { &hf_pkixac_roleAuthority, BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralNames },
+  { &hf_pkixac_roleName     , BER_CLASS_CON, 1, BER_FLAGS_IMPLTAG, dissect_x509ce_GeneralName },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_pkixac_RoleSyntax(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   RoleSyntax_sequence, hf_index, ett_pkixac_RoleSyntax);
+
+  return offset;
+}
+
+
+static const asn_namedbit ClassList_bits[] = {
+  {  0, &hf_pkixac_ClassList_unmarked, -1, -1, "unmarked", NULL },
+  {  1, &hf_pkixac_ClassList_unclassified, -1, -1, "unclassified", NULL },
+  {  2, &hf_pkixac_ClassList_restricted, -1, -1, "restricted", NULL },
+  {  3, &hf_pkixac_ClassList_confidential, -1, -1, "confidential", NULL },
+  {  4, &hf_pkixac_ClassList_secret, -1, -1, "secret", NULL },
+  {  5, &hf_pkixac_ClassList_topSecret, -1, -1, "topSecret", NULL },
+  { 0, NULL, 0, 0, NULL, NULL }
+};
+
+static int
+dissect_pkixac_ClassList(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_bitstring(implicit_tag, actx, tree, tvb, offset,
+                                    ClassList_bits, hf_index, ett_pkixac_ClassList,
+                                    NULL);
+
+  return offset;
+}
+
+
+
+static int
+dissect_pkixac_T_type(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_object_identifier_str(implicit_tag, actx, tree, tvb, offset, hf_index, &object_identifier_id);
+
+  return offset;
+}
+
+
+
+static int
+dissect_pkixac_T_value(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+#line 59 "pkixac.cnf"
+   if (object_identifier_id)
+      offset = call_ber_oid_callback (object_identifier_id, tvb, offset, actx->pinfo, tree);
+
+
+
+  return offset;
+}
+
+
+static const ber_sequence_t SecurityCategory_sequence[] = {
+  { &hf_pkixac_type         , BER_CLASS_CON, 0, BER_FLAGS_IMPLTAG, dissect_pkixac_T_type },
+  { &hf_pkixac_value        , BER_CLASS_CON, 1, BER_FLAGS_IMPLTAG, dissect_pkixac_T_value },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_pkixac_SecurityCategory(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+#line 52 "pkixac.cnf"
+  object_identifier_id = NULL;
+    offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   SecurityCategory_sequence, hf_index, ett_pkixac_SecurityCategory);
+
+
+
+
+  return offset;
+}
+
+
+static const ber_sequence_t SET_OF_SecurityCategory_set_of[1] = {
+  { &hf_pkixac_securityCategories_item, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_pkixac_SecurityCategory },
+};
+
+static int
+dissect_pkixac_SET_OF_SecurityCategory(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_set_of(implicit_tag, actx, tree, tvb, offset,
+                                 SET_OF_SecurityCategory_set_of, hf_index, ett_pkixac_SET_OF_SecurityCategory);
+
+  return offset;
+}
+
+
+static const ber_sequence_t Clearance_sequence[] = {
+  { &hf_pkixac_policyId     , BER_CLASS_CON, 0, BER_FLAGS_IMPLTAG, dissect_pkixac_OBJECT_IDENTIFIER },
+  { &hf_pkixac_classList    , BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_pkixac_ClassList },
+  { &hf_pkixac_securityCategories, BER_CLASS_CON, 2, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_pkixac_SET_OF_SecurityCategory },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_pkixac_Clearance(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   Clearance_sequence, hf_index, ett_pkixac_Clearance);
+
+  return offset;
+}
+
+
+
+static int
+dissect_pkixac_INTEGER_0_MAX(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_integer(implicit_tag, actx, tree, tvb, offset, hf_index,
+                                                NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t AttrSpec_sequence_of[1] = {
+  { &hf_pkixac_AttrSpec_item, BER_CLASS_UNI, BER_UNI_TAG_OID, BER_FLAGS_NOOWNTAG, dissect_pkixac_OBJECT_IDENTIFIER },
+};
+
+static int
+dissect_pkixac_AttrSpec(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
+                                      AttrSpec_sequence_of, hf_index, ett_pkixac_AttrSpec);
+
+  return offset;
+}
+
+
+
+static int
+dissect_pkixac_BOOLEAN(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_boolean(implicit_tag, actx, tree, tvb, offset, hf_index, NULL);
+
+  return offset;
+}
+
+
+static const ber_sequence_t AAControls_sequence[] = {
+  { &hf_pkixac_pathLenConstraint, BER_CLASS_UNI, BER_UNI_TAG_INTEGER, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_pkixac_INTEGER_0_MAX },
+  { &hf_pkixac_permittedAttrs, BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_pkixac_AttrSpec },
+  { &hf_pkixac_excludedAttrs, BER_CLASS_CON, 1, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_pkixac_AttrSpec },
+  { &hf_pkixac_permitUnSpecified, BER_CLASS_UNI, BER_UNI_TAG_BOOLEAN, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_pkixac_BOOLEAN },
+  { NULL, 0, 0, 0, NULL }
+};
+
+static int
+dissect_pkixac_AAControls(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
+                                   AAControls_sequence, hf_index, ett_pkixac_AAControls);
+
+  return offset;
+}
+
+
+static const ber_sequence_t ProxyInfo_sequence_of[1] = {
+  { &hf_pkixac_ProxyInfo_item, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_pkixac_Targets },
+};
+
+static int
+dissect_pkixac_ProxyInfo(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
+  offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
+                                      ProxyInfo_sequence_of, hf_index, ett_pkixac_ProxyInfo);
+
+  return offset;
+}
+
+/*--- PDUs ---*/
+
+static void dissect_Targets_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  dissect_pkixac_Targets(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkixac_Targets_PDU);
+}
+static void dissect_IetfAttrSyntax_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  dissect_pkixac_IetfAttrSyntax(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkixac_IetfAttrSyntax_PDU);
+}
+static void dissect_SvceAuthInfo_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  dissect_pkixac_SvceAuthInfo(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkixac_SvceAuthInfo_PDU);
+}
+static void dissect_RoleSyntax_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  dissect_pkixac_RoleSyntax(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkixac_RoleSyntax_PDU);
+}
+static void dissect_Clearance_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  dissect_pkixac_Clearance(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkixac_Clearance_PDU);
+}
+static void dissect_AAControls_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  dissect_pkixac_AAControls(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkixac_AAControls_PDU);
+}
+static void dissect_ProxyInfo_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
+  asn1_ctx_t asn1_ctx;
+  asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
+  dissect_pkixac_ProxyInfo(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkixac_ProxyInfo_PDU);
+}
+
+
+/*--- End of included file: packet-pkixac-fn.c ---*/
+#line 60 "packet-pkixac-template.c"
+
+/*--- proto_register_pkixac ----------------------------------------------*/
+void proto_register_pkixac(void) {
+
+  /* List of fields */
+  static hf_register_info hf[] = {
+
+/*--- Included file: packet-pkixac-hfarr.c ---*/
+#line 1 "packet-pkixac-hfarr.c"
+    { &hf_pkixac_Targets_PDU,
+      { "Targets", "pkixac.Targets",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "pkixac.Targets", HFILL }},
+    { &hf_pkixac_IetfAttrSyntax_PDU,
+      { "IetfAttrSyntax", "pkixac.IetfAttrSyntax",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "pkixac.IetfAttrSyntax", HFILL }},
+    { &hf_pkixac_SvceAuthInfo_PDU,
+      { "SvceAuthInfo", "pkixac.SvceAuthInfo",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "pkixac.SvceAuthInfo", HFILL }},
+    { &hf_pkixac_RoleSyntax_PDU,
+      { "RoleSyntax", "pkixac.RoleSyntax",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "pkixac.RoleSyntax", HFILL }},
+    { &hf_pkixac_Clearance_PDU,
+      { "Clearance", "pkixac.Clearance",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "pkixac.Clearance", HFILL }},
+    { &hf_pkixac_AAControls_PDU,
+      { "AAControls", "pkixac.AAControls",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "pkixac.AAControls", HFILL }},
+    { &hf_pkixac_ProxyInfo_PDU,
+      { "ProxyInfo", "pkixac.ProxyInfo",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "pkixac.ProxyInfo", HFILL }},
+    { &hf_pkixac_digestedObjectType,
+      { "digestedObjectType", "pkixac.digestedObjectType",
+        FT_UINT32, BASE_DEC, VALS(pkixac_T_digestedObjectType_vals), 0,
+        "pkixac.T_digestedObjectType", HFILL }},
+    { &hf_pkixac_otherObjectTypeID,
+      { "otherObjectTypeID", "pkixac.otherObjectTypeID",
+        FT_OID, BASE_NONE, NULL, 0,
+        "pkixac.OBJECT_IDENTIFIER", HFILL }},
+    { &hf_pkixac_digestAlgorithm,
+      { "digestAlgorithm", "pkixac.digestAlgorithm",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "pkix1explicit.AlgorithmIdentifier", HFILL }},
+    { &hf_pkixac_objectDigest,
+      { "objectDigest", "pkixac.objectDigest",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        "pkixac.BIT_STRING", HFILL }},
+    { &hf_pkixac_issuer,
+      { "issuer", "pkixac.issuer",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "x509ce.GeneralNames", HFILL }},
+    { &hf_pkixac_serial,
+      { "serial", "pkixac.serial",
+        FT_INT32, BASE_DEC, NULL, 0,
+        "pkix1explicit.CertificateSerialNumber", HFILL }},
+    { &hf_pkixac_issuerUID,
+      { "issuerUID", "pkixac.issuerUID",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        "pkix1explicit.UniqueIdentifier", HFILL }},
+    { &hf_pkixac_Targets_item,
+      { "Target", "pkixac.Target",
+        FT_UINT32, BASE_DEC, VALS(pkixac_Target_vals), 0,
+        "pkixac.Target", HFILL }},
+    { &hf_pkixac_targetName,
+      { "targetName", "pkixac.targetName",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "x509ce.GeneralName", HFILL }},
+    { &hf_pkixac_targetGroup,
+      { "targetGroup", "pkixac.targetGroup",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "x509ce.GeneralName", HFILL }},
+    { &hf_pkixac_targetCert,
+      { "targetCert", "pkixac.targetCert",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "pkixac.TargetCert", HFILL }},
+    { &hf_pkixac_targetCertificate,
+      { "targetCertificate", "pkixac.targetCertificate",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "pkixac.IssuerSerial", HFILL }},
+    { &hf_pkixac_certDigestInfo,
+      { "certDigestInfo", "pkixac.certDigestInfo",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "pkixac.ObjectDigestInfo", HFILL }},
+    { &hf_pkixac_policyAuthority,
+      { "policyAuthority", "pkixac.policyAuthority",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "x509ce.GeneralNames", HFILL }},
+    { &hf_pkixac_values,
+      { "values", "pkixac.values",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "pkixac.T_values", HFILL }},
+    { &hf_pkixac_values_item,
+      { "values item", "pkixac.values_item",
+        FT_UINT32, BASE_DEC, VALS(pkixac_T_values_item_vals), 0,
+        "pkixac.T_values_item", HFILL }},
+    { &hf_pkixac_octets,
+      { "octets", "pkixac.octets",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        "pkixac.OCTET_STRING", HFILL }},
+    { &hf_pkixac_oid,
+      { "oid", "pkixac.oid",
+        FT_OID, BASE_NONE, NULL, 0,
+        "pkixac.OBJECT_IDENTIFIER", HFILL }},
+    { &hf_pkixac_string,
+      { "string", "pkixac.string",
+        FT_STRING, BASE_NONE, NULL, 0,
+        "pkixac.UTF8String", HFILL }},
+    { &hf_pkixac_service,
+      { "service", "pkixac.service",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "x509ce.GeneralName", HFILL }},
+    { &hf_pkixac_ident,
+      { "ident", "pkixac.ident",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "x509ce.GeneralName", HFILL }},
+    { &hf_pkixac_authInfo,
+      { "authInfo", "pkixac.authInfo",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        "pkixac.OCTET_STRING", HFILL }},
+    { &hf_pkixac_roleAuthority,
+      { "roleAuthority", "pkixac.roleAuthority",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "x509ce.GeneralNames", HFILL }},
+    { &hf_pkixac_roleName,
+      { "roleName", "pkixac.roleName",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "x509ce.GeneralName", HFILL }},
+    { &hf_pkixac_policyId,
+      { "policyId", "pkixac.policyId",
+        FT_OID, BASE_NONE, NULL, 0,
+        "pkixac.OBJECT_IDENTIFIER", HFILL }},
+    { &hf_pkixac_classList,
+      { "classList", "pkixac.classList",
+        FT_BYTES, BASE_NONE, NULL, 0,
+        "pkixac.ClassList", HFILL }},
+    { &hf_pkixac_securityCategories,
+      { "securityCategories", "pkixac.securityCategories",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "pkixac.SET_OF_SecurityCategory", HFILL }},
+    { &hf_pkixac_securityCategories_item,
+      { "SecurityCategory", "pkixac.SecurityCategory",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "pkixac.SecurityCategory", HFILL }},
+    { &hf_pkixac_type,
+      { "type", "pkixac.type",
+        FT_OID, BASE_NONE, NULL, 0,
+        "pkixac.T_type", HFILL }},
+    { &hf_pkixac_value,
+      { "value", "pkixac.value",
+        FT_NONE, BASE_NONE, NULL, 0,
+        "pkixac.T_value", HFILL }},
+    { &hf_pkixac_pathLenConstraint,
+      { "pathLenConstraint", "pkixac.pathLenConstraint",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "pkixac.INTEGER_0_MAX", HFILL }},
+    { &hf_pkixac_permittedAttrs,
+      { "permittedAttrs", "pkixac.permittedAttrs",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "pkixac.AttrSpec", HFILL }},
+    { &hf_pkixac_excludedAttrs,
+      { "excludedAttrs", "pkixac.excludedAttrs",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "pkixac.AttrSpec", HFILL }},
+    { &hf_pkixac_permitUnSpecified,
+      { "permitUnSpecified", "pkixac.permitUnSpecified",
+        FT_BOOLEAN, BASE_NONE, NULL, 0,
+        "pkixac.BOOLEAN", HFILL }},
+    { &hf_pkixac_AttrSpec_item,
+      { "AttrSpec item", "pkixac.AttrSpec_item",
+        FT_OID, BASE_NONE, NULL, 0,
+        "pkixac.OBJECT_IDENTIFIER", HFILL }},
+    { &hf_pkixac_ProxyInfo_item,
+      { "Targets", "pkixac.Targets",
+        FT_UINT32, BASE_DEC, NULL, 0,
+        "pkixac.Targets", HFILL }},
+    { &hf_pkixac_ClassList_unmarked,
+      { "unmarked", "pkixac.unmarked",
+        FT_BOOLEAN, 8, NULL, 0x80,
+        NULL, HFILL }},
+    { &hf_pkixac_ClassList_unclassified,
+      { "unclassified", "pkixac.unclassified",
+        FT_BOOLEAN, 8, NULL, 0x40,
+        NULL, HFILL }},
+    { &hf_pkixac_ClassList_restricted,
+      { "restricted", "pkixac.restricted",
+        FT_BOOLEAN, 8, NULL, 0x20,
+        NULL, HFILL }},
+    { &hf_pkixac_ClassList_confidential,
+      { "confidential", "pkixac.confidential",
+        FT_BOOLEAN, 8, NULL, 0x10,
+        NULL, HFILL }},
+    { &hf_pkixac_ClassList_secret,
+      { "secret", "pkixac.secret",
+        FT_BOOLEAN, 8, NULL, 0x08,
+        NULL, HFILL }},
+    { &hf_pkixac_ClassList_topSecret,
+      { "topSecret", "pkixac.topSecret",
+        FT_BOOLEAN, 8, NULL, 0x04,
+        NULL, HFILL }},
+
+/*--- End of included file: packet-pkixac-hfarr.c ---*/
+#line 67 "packet-pkixac-template.c"
+  };
+
+  /* List of subtrees */
+  static gint *ett[] = {
+	&ett_pkixac,
+
+/*--- Included file: packet-pkixac-ettarr.c ---*/
+#line 1 "packet-pkixac-ettarr.c"
+    &ett_pkixac_ObjectDigestInfo,
+    &ett_pkixac_IssuerSerial,
+    &ett_pkixac_Targets,
+    &ett_pkixac_Target,
+    &ett_pkixac_TargetCert,
+    &ett_pkixac_IetfAttrSyntax,
+    &ett_pkixac_T_values,
+    &ett_pkixac_T_values_item,
+    &ett_pkixac_SvceAuthInfo,
+    &ett_pkixac_RoleSyntax,
+    &ett_pkixac_Clearance,
+    &ett_pkixac_SET_OF_SecurityCategory,
+    &ett_pkixac_ClassList,
+    &ett_pkixac_SecurityCategory,
+    &ett_pkixac_AAControls,
+    &ett_pkixac_AttrSpec,
+    &ett_pkixac_ProxyInfo,
+
+/*--- End of included file: packet-pkixac-ettarr.c ---*/
+#line 73 "packet-pkixac-template.c"
+  };
+
+  /* Register protocol */
+  proto_pkixac = proto_register_protocol(PNAME, PSNAME, PFNAME);
+
+  /* Register fields and subtrees */
+  proto_register_field_array(proto_pkixac, hf, array_length(hf));
+  proto_register_subtree_array(ett, array_length(ett));
+
+}
+
+
+/*--- proto_reg_handoff_pkixac -------------------------------------------*/
+void proto_reg_handoff_pkixac(void) {
+
+/*--- Included file: packet-pkixac-dis-tab.c ---*/
+#line 1 "packet-pkixac-dis-tab.c"
+  register_ber_oid_dissector("1.3.6.1.5.5.7.1.6", dissect_AAControls_PDU, proto_pkixac, "id-pe-aaControls");
+  register_ber_oid_dissector("1.3.6.1.5.5.7.1.10", dissect_ProxyInfo_PDU, proto_pkixac, "id-pe-ac-proxying");
+  register_ber_oid_dissector("1.3.6.1.5.5.7.10.1", dissect_SvceAuthInfo_PDU, proto_pkixac, "id-aca-authenticationInfo");
+  register_ber_oid_dissector("1.3.6.1.5.5.7.10.2", dissect_SvceAuthInfo_PDU, proto_pkixac, "id-aca-accessIdentity");
+  register_ber_oid_dissector("1.3.6.1.5.5.7.10.3", dissect_IetfAttrSyntax_PDU, proto_pkixac, "id-aca-chargingIdentity");
+  register_ber_oid_dissector("1.3.6.1.5.5.7.10.4", dissect_IetfAttrSyntax_PDU, proto_pkixac, "id-aca-group");
+  register_ber_oid_dissector("2.5.1.5.55", dissect_Clearance_PDU, proto_pkixac, "id-at-clearance");
+  register_ber_oid_dissector("2.5.4.55", dissect_Clearance_PDU, proto_pkixac, "id-at-clearance");
+  register_ber_oid_dissector("2.5.4.72", dissect_RoleSyntax_PDU, proto_pkixac, "id-at-role");
+  register_ber_oid_dissector("2.5.29.55", dissect_Targets_PDU, proto_pkixac, "id-ce-targetInformation");
+
+
+/*--- End of included file: packet-pkixac-dis-tab.c ---*/
+#line 88 "packet-pkixac-template.c"
+}
+