"value":"with {\r\n\tthe IUT being in the 'authorized' state\r\n\tthe IUT being requested to include certificate in the SecuredMessage\r\n} ensure that {\r\n\t when {\r\n\t\tthe IUT is requested to send a SecuredMessage\r\n\t} then {\r\n\t\tthe IUT sends a SecuredMessage\r\n\t\t\tcontaining header_fields['signer_info'].signer {\r\n\t\t\t\tcontaining type\r\n\t\t\t\t\tindicating certificate\r\n\t\t\t\tcontaining certificate {\r\n\t\t\t\t\tcontaining version\r\n\t\t\t\t\t\tindicating '2'\r\n\t\t\t\t}\r\n\t\t\t}\r\n\t}\r\n}\r\n"
"value":"with {\r\n\tthe IUT being in the 'authorized' state\r\n\tthe IUT being requested to include certificate in the SecuredMessage\r\n} ensure that {\r\n\t when {\r\n\t\tthe IUT is requested to send a SecuredMessage\r\n\t} then {\r\n\t\tthe IUT sends a SecuredMessage\r\n\t\t\tcontaining header_fields['signer_info'].signer\r\n\t\t\t\tcontaining type\r\n\t\t\t\t\tindicating certificate\r\n\t\t\t\tcontaining certificate\r\n\t\t\t\t\tcontaining version\r\n\t\t\t\t\t\tindicating '2'\r\n\t}\r\n}\r\n"
"value":"with {\r\n\tthe IUT being in the 'authorized' state\r\n\tthe IUT being requested to include certificate chain in the next CAM\r\n} ensure that {\r\n\t when {\r\n\t\tthe IUT is requested to send a CAM\r\n\t} then {\r\n\t\tthe IUT sends a SecuredMessage\r\n\t\t\tcontaining header_fields['signer_info'].signer {\r\n\t\t\t\tcontaining type\r\n\t\t\t\t\tindicating certificate_chain\r\n\t\t\t\tcontaining certificates.length >1\r\n\t\t\t\tcontaining certificates[last-1] {\r\n\t\t\t\t\tcontaining version\r\n\t\t\t\t\t\tindicating '2'\r\n\t\t\t\t}\r\n\t\t\t}\r\n\t}\r\n}"
"value":"with {\r\n\tthe IUT being in the 'authorized' state\r\n\tthe IUT being requested to include certificate chain in the next CAM\r\n} ensure that {\r\n\t when {\r\n\t\tthe IUT is requested to send a CAM\r\n\t} then {\r\n\t\tthe IUT sends a SecuredMessage\r\n\t\t\tcontaining header_fields['signer_info'].signer\r\n\t\t\t\tcontaining type\r\n\t\t\t\t\tindicating 'certificate_chain'\r\n\t\t\t\tand containing certificates\r\n\t\t\t\t\tindicating length N > 0\r\n\t\t\t\t\tand containing certificates [n] (0..N)\r\n\t\t\t\t\t\tcontaining version\r\n\t\t\t\t\t\t\tindicating '2'\r\n\t}\r\n}"
"value":"Check that the certificate chain is valid;\r\nCheck signer_info\r\n"
"value":"Check that the references in the certificate chain are valid\r\nCheck that signer_info type of all certificates in the chain are 'certificate_digest_with_sha256', 'certificate_digest_with_other_algorithm'or 'self'"
},
"_expectedResults":{
"isGenerated":false,
"key":"_expectedResults",
"origin":"b3f8078e-c578-42f4-a2d6-577b09c4abc6",
"type":"STRING",
"value":"with {\r\n\tthe IUT being in the 'authorized' state\r\n\tthe IUT being requested to include certificate chain in the next CAM\r\n} ensure that {\r\n\t when {\r\n\t\tthe IUT is requested to send a CAM\r\n\t} then {\r\n\t\tthe IUT sends a SecuredMessage\r\n\t\t\tcontaining header_fields['signer_info'].signer {\r\n\t\t\t\tcontaining type\r\n\t\t\t\t\tindicating certificate_chain\r\n\t\t\t\tcontaining certificates[N] {\r\n\t\t\t\t\tcontaining signer_info {\r\n\t\t\t\t\t\tcontaining type\r\n\t\t\t\t\t\t\tindicating 'certificate_digest_with_sha256'\r\n\t\t\t\t\t\tcontaining digest\r\n\t\t\t\t\t\t\treferenced to the certificates[N - 1]\r\n\t\t\t\t\t}\r\n\t\t\t\t}\r\n\t\t\t}\r\n\t}\r\n}"
"value":"with {\r\n\tthe IUT being in the 'authorized' state\r\n\tthe IUT being requested to include certificate chain in the next CAM\r\n} ensure that {\r\n\t when {\r\n\t\tthe IUT is requested to send a CAM\r\n\t} then {\r\n\t\tthe IUT sends a SecuredMessage\r\n\t\t\tcontaining header_fields['signer_info'].signer\r\n\t\t\t\tcontaining type\r\n\t\t\t\t\tindicating 'certificate_chain'\r\n\t\t\t\tand containing certificates\r\n\t\t\t\t\tindicating length N > 1\r\n\t\t\t\t\tand containing certificates[0]\r\n\t\t\t\t\t\tcontaining signer_info\r\n\t\t\t\t\t\t\tcontaining type\r\n\t\t\t\t\t\t\t\tindicating 'certificate_digest_with_sha256'\r\n\t\t\t\t\t\t\t\tor indicating 'certificate_digest_with_other_algorythm'\r\n\t\t\t\t\t\t\tand containing digest\r\n\t\t\t\t\t\t\t\treferenced to the trusted certificate\r\n\t\t\t\t\t\tor containing signer_info\r\n\t\t\t\t\t\t\tcontaining type\r\n\t\t\t\t\t\t\t\tindicating 'self'\r\n\t\t\t\t\tand containing certificates[n] (1..N)\r\n\t\t\t\t\t\tcontaining signer_info\r\n\t\t\t\t\t\t\tcontaining type\r\n\t\t\t\t\t\t\t\tindicating 'certificate_digest_with_sha256'\r\n\t\t\t\t\t\t\t\tor indicating 'certificate_digest_with_other_algorythm'\r\n\t\t\t\t\t\t\tand containing digest\r\n\t\t\t\t\t\t\t\treferenced to the certificates[n-1]\r\n\t}\r\n}"