Commit 9e56815d authored by garciay's avatar garciay
Browse files

Start Security support in the TA 

Start ATS security review
Validation of TD_AUTO_IOT_DENM_RWW_BV_01 in progress
parent ed2d2e21

etc/AtsAutoInterop/AtsAutoInterop.cfg

+13 −4
Original line number Diff line number Diff line
@@ -49,6 +49,15 @@ LogEventTypes:= Yes 
#   beaconing              : Set to 1 if GnLayer shall start beaconing

#   Beaconning timer expiry: expiry (ms)

#   device_mode            : Set to 1 if the layer shall encapsulate upper layer PDU

#   secured_mode           : Set to 1 if message exchanges shall be secured

#   secure_db_path         : Path to the certificates and keys storage location

#   hash                   : Hash algorithm to be used when secured mode is set

#                            Authorized values are SHA-256 or SHA-384

#                            Default: SHA-256

#   signature              : Signature algorithm to be used when secured mode is set

#                            Authorized values are NISTP-256, NISTP-384, BP-256 and BP-384

#                            Default: NISTP-256

#   cypher                 : Cyphering algorithm to be used when secured mode is set

# Ethernet layer

#   mac_src  :Source MAC address

#   mac_bc   :Broadcast address
@@ -82,11 +91,11 @@ LogEventTypes:= Yes 
#     save_mode   : 1 to save sent packet, 0 otherwise



# GeoNetworking component port using Commsignia layer

NodeB.geoNetworkingPort.params := "GN(ll_address=04e548000001,latitude=43551050,longitude=10298730,beaconing=0,expiry=1000,its_aid=141)/COMMSIGNIA(mac_src=04e548000001,mac_bc=FFFFFFFFFFFF,eth_type=8947,target_host=10.200.1.101,target_port=7942,source_port=7943,its_aid=141,interface_id=2,tx_power=-32)/UDP(dst_ip=192.168.56.1,dst_port=12346,src_ip=192.168.156.4,src_port=12345)/ETH(mac_src=04e548000001,mac_dst=0A0027000011,eth_type=0800)/PCAP(mac_src=04e548000001,file=/home/vagrant/TriesAndDelete/etsi_its/testdata/TC_AUTO_IOT_DENM_RWW_BV_01_short.pcap,filter=and (udp port 30000 or udp port 7943))"

NodeC.geoNetworkingPort.params := "GN(ll_address=70b3d5791b48,latitude=43551050,longitude=10298730,beaconing=0,expiry=1000,its_aid=141)/COMMSIGNIA(mac_src=70b3d5791b48,mac_bc=FFFFFFFFFFFF,eth_type=8947,target_host=10.200.1.101,target_port=7942,source_port=7943,its_aid=141,interface_id=2,tx_power=-32)/UDP(dst_ip=192.168.56.1,dst_port=12346,src_ip=192.168.156.4,src_port=12345)/ETH(mac_src=70b3d5791b48,mac_dst=0A0027000011,eth_type=0800)/PCAP(mac_src=70b3d5791b48,file=/home/vagrant/TriesAndDelete/etsi_its/testdata/TC_AUTO_IOT_DENM_RWW_BV_01_short.pcap,filter=and (udp port 30000 or udp port 7943))"

NodeB.geoNetworkingPort.params := "GN(ll_address=04e548000001,latitude=43551050,longitude=10298730,beaconing=0,expiry=1000,its_aid=38)/COMMSIGNIA(mac_src=04e548000001,mac_bc=FFFFFFFFFFFF,eth_type=8947,target_host=10.200.1.101,target_port=7942,source_port=7943,its_aid=38,interface_id=2,tx_power=-32)/UDP(dst_ip=192.168.56.1,dst_port=12346,src_ip=192.168.156.4,src_port=12345)/ETH(mac_src=04e548000001,mac_dst=0A0027000011,eth_type=0800)/PCAP(mac_src=04e548000001,file=/home/vagrant/TriesAndDelete/etsi_its/testdata/TC_AUTO_IOT_DENM_RWW_BV_01_short.pcap,filter=and (udp port 30000 or udp port 7943))"

NodeC.geoNetworkingPort.params := "GN(ll_address=70b3d5791b48,latitude=43551050,longitude=10298730,beaconing=0,expiry=1000,its_aid=38)/COMMSIGNIA(mac_src=70b3d5791b48,mac_bc=FFFFFFFFFFFF,eth_type=8947,target_host=10.200.1.101,target_port=7942,source_port=7943,its_aid=38,interface_id=2,tx_power=-32)/UDP(dst_ip=192.168.56.1,dst_port=12346,src_ip=192.168.156.4,src_port=12345)/ETH(mac_src=70b3d5791b48,mac_dst=0A0027000011,eth_type=0800)/PCAP(mac_src=70b3d5791b48,file=/home/vagrant/TriesAndDelete/etsi_its/testdata/TC_AUTO_IOT_DENM_RWW_BV_01_short.pcap,filter=and (udp port 30000 or udp port 7943))"

# GeoNetworking component port

#NodeB.geoNetworkingPort.params := "GN(ll_address=04e548000001,latitude=43551050,longitude=10298730,beaconing=0,expiry=1000,its_aid=141)/ETH(mac_src=04e548000001,mac_dst=0A0027000011,eth_type=0800)/PCAP(mac_src=04e548000001,file=/home/vagrant/TriesAndDelete/etsi_its/testdata/TC_AUTO_IOT_DENM_RWW_BV_01.pcap,filter=and ether src 04e548000001)"

#NodeC.geoNetworkingPort.params := "GN(ll_address=70b3d5791b48,latitude=43551050,longitude=10298730,beaconing=0,expiry=1000,its_aid=141)/ETH(mac_src=70b3d5791b48,mac_dst=0A0027000011,eth_type=0800)/PCAP(mac_src=70b3d5791b48,file=/home/vagrant/TriesAndDelete/etsi_its/testdata/TC_AUTO_IOT_DENM_RWW_BV_01.pcap,filter=and  ether src 70b3d5791b48)"

#NodeB.geoNetworkingPort.params := "GN(ll_address=04e548000001,latitude=43551050,longitude=10298730,beaconing=0,expiry=1000,its_aid=38)/ETH(mac_src=04e548000001,mac_dst=0A0027000011,eth_type=0800)/PCAP(mac_src=04e548000001,file=/home/vagrant/TriesAndDelete/etsi_its/testdata/TC_AUTO_IOT_DENM_RWW_BV_01.pcap,filter=and ether src 04e548000001)"

#NodeC.geoNetworkingPort.params := "GN(ll_address=70b3d5791b48,latitude=43551050,longitude=10298730,beaconing=0,expiry=1000,its_aid=38)/ETH(mac_src=70b3d5791b48,mac_dst=0A0027000011,eth_type=0800)/PCAP(mac_src=70b3d5791b48,file=/home/vagrant/TriesAndDelete/etsi_its/testdata/TC_AUTO_IOT_DENM_RWW_BV_01.pcap,filter=and  ether src 70b3d5791b48)"



# UpperTester port based on UDP 

system.utPort.params := "UT_GN/UDP(dst_ip=192.168.1.1,dst_port=12346,src_ip=192.168.156.4,src_port=12345)/ETH(mac_src=026f8338c1e5,mac_dst=0A0027000011,eth_type=0800)/PCAP(mac_src=0800275c4959,nic=enp0s8,filter=and udp port 12346)"

etc/AtsCAM/AtsCAM.cfg

+10 −1
Original line number Diff line number Diff line
@@ -46,6 +46,15 @@ LogEventTypes:= Yes 
#   beaconing              : Set to 1 if GnLayer shall start beaconing

#   Beaconning timer expiry: expiry (ms)

#   device_mode            : Set to 1 if the layer shall encapsulate upper layer PDU

#   secured_mode           : Set to 1 if message exchanges shall be secured

#   secure_db_path         : Path to the certificates and keys storage location

#   hash                   : Hash algorithm to be used when secured mode is set

#                            Authorized values are SHA-256 or SHA-384

#                            Default: SHA-256

#   signature              : Signature algorithm to be used when secured mode is set

#                            Authorized values are NISTP-256, NISTP-384, BP-256 and BP-384

#                            Default: NISTP-256

#   cypher                 : Cyphering algorithm to be used when secured mode is set

# Ethernet layer

#   mac_src  :Source MAC address

#   mac_bc   :Broadcast address
@@ -77,7 +86,7 @@ LogEventTypes:= Yes 
#     time_offset : Time offset, used to skip packets with time offset < time_offset

#     save_mode   : 1 to save sent packet, 0 otherwise



system.camPort.params := "CAM/BTP(type=btpB,dst_port=2001,src_port=0,deviceMode=1)/GN(ll_address=0800275c4959,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,expiry=1000,beaconing=0,deviceMode=1,its_aid=141)/ETH(mac_src=0800275c4959,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=0800275c4959,nic=enp0s8,filter=and ether proto 0x8947)"

system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP(type=btpB,dst_port=2001,src_port=0,deviceMode=1)/GN(ll_address=0800275c4959,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,expiry=1000,beaconing=0,deviceMode=1,its_aid=38)/ETH(mac_src=0800275c4959,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=0800275c4959,nic=enp0s8,filter=and ether proto 0x8947)"



# CAM UpperTester port based on UDP (ETSI Wlan)

system.utPort.params := "UT_CAM/UDP(dst_ip=192.168.0.102,dst_port=12345,src_ip=192.168.0.104,src_port=12345)/ETH(mac_src=0800275c4959,mac_dst=F8CAB8083918,eth_type=0800)/PCAP(mac_src=0800275c4959,nic=enp0s8,filter=and udp port 12345)"

etc/AtsDENM/AtsDENM.cfg

+10 −1
Original line number Diff line number Diff line
@@ -46,6 +46,15 @@ LogEventTypes:= Yes 
#   beaconing              : Set to 1 if GnLayer shall start beaconing

#   Beaconning timer expiry: expiry (ms)

#   device_mode            : Set to 1 if the layer shall encapsulate upper layer PDU

#   secured_mode           : Set to 1 if message exchanges shall be secured

#   secure_db_path         : Path to the certificates and keys storage location

#   hash                   : Hash algorithm to be used when secured mode is set

#                            Authorized values are SHA-256 or SHA-384

#                            Default: SHA-256

#   signature              : Signature algorithm to be used when secured mode is set

#                            Authorized values are NISTP-256, NISTP-384, BP-256 and BP-384

#                            Default: NISTP-256

#   cypher                 : Cyphering algorithm to be used when secured mode is set

# Ethernet layer

#   mac_src  :Source MAC address

#   mac_bc   :Broadcast address
@@ -77,7 +86,7 @@ LogEventTypes:= Yes 
#     time_offset : Time offset, used to skip packets with time offset < time_offset

#     save_mode   : 1 to save sent packet, 0 otherwise



system.denmPort.params := "DENM/BTP(type=btpB,dst_port=2001,src_port=0)/GN(ll_address=0800275c4959,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,expiry=1000,beaconing=0,its_aid=141)/ETH(mac_src=0800275c4959,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=0800275c4959,nic=enp0s8,filter=and ether proto 0x8947)"

system.denmPort.params := "DENM(next_header=btpB,header_type=tsb)/BTP(type=btpB,dst_port=2001,src_port=0)/GN(ll_address=0800275c4959,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,expiry=1000,beaconing=0,its_aid=38)/ETH(mac_src=0800275c4959,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=0800275c4959,nic=enp0s8,filter=and ether proto 0x8947)"



# DENM UpperTester port based on UDP (ETSI Wlan)

system.utPort.params := "UT_DENM/UDP(dst_ip=192.168.0.102,dst_port=12345,src_ip=192.168.0.104,src_port=12345)/ETH(mac_src=0800275c4959,mac_dst=F8CAB8083918,eth_type=0800)/PCAP(mac_src=0800275c4959,nic=enp0s8,filter=and udp port 12345)"

etc/AtsGeoNetworking/AtsGeoNetworking.cfg

+12 −3
Original line number Diff line number Diff line
@@ -46,6 +46,15 @@ LogEventTypes:= Yes 
#   beaconing              : Set to 1 if GnLayer shall start beaconing

#   Beaconning timer expiry: expiry (ms)

#   device_mode            : Set to 1 if the layer shall encapsulate upper layer PDU

#   secured_mode           : Set to 1 if message exchanges shall be secured

#   secure_db_path         : Path to the certificates and keys storage location

#   hash                   : Hash algorithm to be used when secured mode is set

#                            Authorized values are SHA-256 or SHA-384

#                            Default: SHA-256

#   signature              : Signature algorithm to be used when secured mode is set

#                            Authorized values are NISTP-256, NISTP-384, BP-256 and BP-384

#                            Default: NISTP-256

#   cypher                 : Cyphering algorithm to be used when secured mode is set

# Ethernet layer

#   mac_src  :Source MAC address

#   mac_bc   :Broadcast address
@@ -78,11 +87,11 @@ LogEventTypes:= Yes 
#     save_mode   : 1 to save sent packet, 0 otherwise



# Single GeoNetworking component port

system.geoNetworkingPort.params := "GN(ll_address=F8CAB8083918,latitude=43551050,longitude=10298730,beaconing=0,expiry=1000,its_aid=141)/ETH(mac_src=0800275c4959,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=0800275c4959,nic=enp0s8,filter=and ether proto 0x8947)"

system.geoNetworkingPort.params := "GN(ll_address=F8CAB8083918,latitude=43551050,longitude=10298730,beaconing=0,expiry=1000,its_aid=38)/ETH(mac_src=0800275c4959,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=0800275c4959,nic=enp0s8,filter=and ether proto 0x8947)"



# Multiple GeoNetworking component port

Comp1.geoNetworkingPort.params := "GN(ll_address=F8CAB8083919,latitude=43551050,longitude=10298730,beaconing=1,expiry=1000,its_aid=141)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=F8CAB8083919,nic=,file=/home/ubuntu/tmp/test_1_beacon.pcap,filter=ether proto 0x8947,frame_offset=0,save_mode=0)"

Comp2.geoNetworkingPort.params := "GN(ll_address=F8CAB808391A,latitude=43551050,longitude=10298730,beaconing=1,expiry=1000,its_aid=141)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=F8CAB808391A,nic=,file=/home/ubuntu/tmp/test_1_beacon.pcap,filter=ether proto 0x8947,frame_offset=0,save_mode=0)"

Comp1.geoNetworkingPort.params := "GN(ll_address=F8CAB8083919,latitude=43551050,longitude=10298730,beaconing=1,expiry=1000,its_aid=38)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=F8CAB8083919,nic=,file=/home/ubuntu/tmp/test_1_beacon.pcap,filter=ether proto 0x8947,frame_offset=0,save_mode=0)"

Comp2.geoNetworkingPort.params := "GN(ll_address=F8CAB808391A,latitude=43551050,longitude=10298730,beaconing=1,expiry=1000,its_aid=38)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=F8CAB808391A,nic=,file=/home/ubuntu/tmp/test_1_beacon.pcap,filter=ether proto 0x8947,frame_offset=0,save_mode=0)"



# UpperTester port based on UDP

system.utPort.params := "UT/UDP(dst_ip=192.168.56.1,dst_port=12346,src_ip=192.168.156.4,src_port=12345)/ETH(mac_src=026f8338c1e5,mac_dst=0A0027000011,eth_type=0800)/PCAP(mac_src=0800275c4959,nic=enp0s8,filter=udp port 12346)"

etc/AtsRSUsSimulator/AtsRSUSimulator.cfg

+10 −1
Original line number Diff line number Diff line
@@ -68,6 +68,15 @@ LogEventTypes:= Yes 
#   beaconing              : Set to 1 if GnLayer shall start beaconing

#   Beaconning timer expiry: expiry (ms)

#   device_mode            : Set to 1 if the layer shall encapsulate upper layer PDU

#   secured_mode           : Set to 1 if message exchanges shall be secured

#   secure_db_path         : Path to the certificates and keys storage location

#   hash                   : Hash algorithm to be used when secured mode is set

#                            Authorized values are SHA-256 or SHA-384

#                            Default: SHA-256

#   signature              : Signature algorithm to be used when secured mode is set

#                            Authorized values are NISTP-256, NISTP-384, BP-256 and BP-384

#                            Default: NISTP-256

#   cypher                 : Cyphering algorithm to be used when secured mode is set

# Ethernet layer

#   mac_src  :Source MAC address

#   mac_bc   :Broadcast address
@@ -100,7 +109,7 @@ LogEventTypes:= Yes 
#     save_mode   : 1 to save sent packet, 0 otherwise



# Single GeoNetworking component port

system.geoNetworkingPort.params := "GN(ll_address=F8CAB8083918,latitude=43551050,longitude=10298730,beaconing=0,expiry=1000,its_aid=141)/ETH(mac_src=0800275c4959,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=0800275c4959,nic=enp0s8,filter=and ether proto 0x8947)"

system.geoNetworkingPort.params := "GN(ll_address=F8CAB8083918,latitude=43551050,longitude=10298730,beaconing=0,expiry=1000,its_aid=38)/ETH(mac_src=0800275c4959,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=0800275c4959,nic=enp0s8,filter=and ether proto 0x8947)"



# UpperTester port based on UDP

system.utPort.params := "UT/UDP(dst_ip=192.168.56.1,dst_port=12346,src_ip=192.168.156.4,src_port=12345)/ETH(mac_src=026f8338c1e5,mac_dst=0A0027000011,eth_type=0800)/PCAP(mac_src=0800275c4959,nic=enp0s8,filter=udp port 12346)"