Logo etsi

ETSI's Bug Tracker

Notice: information submitted on the ETSI issue Tracker may be incorporated in ETSI publication(s) and therefore subject to the ETSI IPR policy.

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

Project

Category

View Status

Date Submitted

Last Update

0007264

SECURITY

TSS&TP

public

17-12-2015 13:27

17-12-2015 13:28

Reporter

Peter Felber

Assigned To

Denis Filatov

Priority

normal

Severity

minor

Reproducibility

have not tried

Status

assigned

Resolution

open

Platform

OS Version

Product Version

Test_Spec_TS103096_V121

Target Version

Test_Spec_TS103096_V121

Fixed in Version

Summary

0007264: Add Testcases for new chapter 5.3.5.4 Check that the Authorization Authority is only signed by the Root CA

Description

Add Testcases to ensure that the IUT discards messages which are signed by an Authorization Ticket which is issued by an Authorization Authority which is not issued by a Root CA

Add the following testcase four times for each of the subject_types:
- authorization_authority
- enrollment_authority
- enrollment_credential
- authorization_ticket

with {
  the IUT being in the 'authorized' state
}
ensure that {
  when {
    the IUT is receiving a SecuredMessage
      containing header_fields ['signer_info'].signer {
        containing certificate {
          containing type
            indicating 'certificate_chain'
          containing certificates[0] (CERT_TS_02_02_BO_AA) {
            containing subject_info.subject_type
              indicating 'authorization_authority'
            containing signer_info.digest
              referencing to certificate
                containing subject_info.subject_type
                  indicating 'authorization_authority'
          }
          containing certificates[1] (CERT_TS_02_02_BO_AT) {
            containing subject_info.subject_type
              indicating 'authorization_ticket'
            containing signer_info.digest
              referencing to CERT_TS_02_02_BO_AA
          }
        }
      }
  } then {
    the IUT discards the message
  }
}

Issue History
Date Modified	Username	Field	Change
17-12-2015 13:27	Peter Felber	New Issue
17-12-2015 13:27	Peter Felber	Status	new => assigned
17-12-2015 13:27	Peter Felber	Assigned To	=> Denis Filatov
17-12-2015 13:28	Peter Felber	Relationship added	child of 0007261

Notes
There are no notes attached to this issue.