Commit ebf48403 authored by garciay's avatar garciay
Browse files

ATS security review

parent 2c190cf6

etc/TestCodec/TestCodec.cfg

+22 −18
Original line number Diff line number Diff line
@@ -12,9 +12,9 @@ LibItsGeoNetworking_Pics.PICS_GN_LOCAL_GN_ADDR := { 
LibItsCommon_Pixits.PX_IUT_STATION_ID := 10143;



# GeoNetwoking only, no facility layer

LibItsGeoNetworking_Pixits.PX_GN_UPPER_LAYER := e_any

#LibItsGeoNetworking_Pixits.PX_GN_UPPER_LAYER := e_any

# With facility layer

#LibItsGeoNetworking_Pixits.PX_GN_UPPER_LAYER := e_btpA

LibItsGeoNetworking_Pixits.PX_GN_UPPER_LAYER := e_btpB



LibCommon_Time.PX_TAC := 5.0
@@ -48,10 +48,11 @@ LogEventTypes:= Yes 
#   device_mode     : Set to 1 if the layer shall encapsulate upper layer PDU

#   device_mode     : Set to 1 if the layer shall encapsulate upper layer PDU

# GN Layer

#   its_aid                : ITS AID as defined by ETSI TS 102 965 V1.2.1. Default: 141

#   ll_address             : GeoNetworking address of the Test System

#   latitude               : Latitude of the Test System

#   longitude              : Kongitude of the Test System

#   beaconing              : Set to 1 if GnLayer shall start beaconing

#   beaconing              : Set to 1 if the Test System shall start beaconing

#   Beaconning timer expiry: Expiry (ms)

#   device_mode            : Set to 1 if the layer shall encapsulate upper layer PDU

#   secured_mode           : Set to 1 if message exchanges shall be secured
@@ -61,7 +62,7 @@ LogEventTypes:= Yes 
#                            Authorized values are SHA-256 or SHA-384

#                            Default: SHA-256

#   signature              : Signature algorithm to be used when secured mode is set

#                            Authorized values are NISTP-256, NISTP-384, BP-256 and BP-384

#                            Authorized values are NISTP-256, BP-256 and BP-384

#                            Default: NISTP-256

#   cypher                 : Cyphering algorithm to be used when secured mode is set

# Ethernet layer
@@ -97,35 +98,35 @@ LogEventTypes:= Yes 


# Single GeoNetworking component port

# GN port using PCAP file

system.geoNetworkingPort.params := "GN(ll_address=F8CAB8083918,latitude=43551050,longitude=10298730,beaconing=1,expiry=1000,its_aid=38,secured_mode=1,certificate=CERT_TS_A,sec_db_path=/home/vagrant/tmp/Yann)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=BABEBABE0002,nic=,file=../../../testdata/test_61_beacon_sec.pcap,filter=and ether proto 0x8947,frame_offset=0,save_mode=0)"

#system.geoNetworkingPort.params := "GN(ll_address=F8CAB8083918,latitude=43551050,longitude=10298730,beaconing=1,expiry=1000,its_aid=141,secured_mode=1,certificate=CERT_TS_A,sec_db_path=/home/vagrant/tmp/Yann)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=BABEBABE0002,nic=,file=../../../testdata/test_61_beacon_sec.pcap,filter=and ether proto 0x8947,frame_offset=0,save_mode=0)"

# GN port using NIC

#system.geoNetworkingPort.params := "GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,beaconing=1,expiry=500,its_aid=38,secured_mode=1,certificate=CERT_TS_A,sec_db_path=/home/vagrant/tmp/Yann)/ETH(mac_src=4C5E0C14D2EA,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=4C5E0C14D2EA,nic=eth1,file=,filter=and ether proto 0x8947,frame_offset=0,save_mode=0)"

system.geoNetworkingPort.params := "GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,beaconing=1,expiry=1000,device_mode=1,its_aid=141,secured_mode=1,certificate=CERT_TS_A,sec_db_path=/home/vagrant/tmp/Yann)/ETH(mac_src=4C5E0C14D2EA,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=4C5E0C14D2EA,nic=eth1,file=,filter=and ether proto 0x8947,frame_offset=0,save_mode=0)"

# Commsignia GN port

#system.geoNetworkingPort.params := "GN(ll_address=F8CAB8083918,latitude=43551050,longitude=10298730,beaconing=0,expiry=1000,its_aid=38,secured_mode=0,certificate=ta_cert_nistp256_sha256)/COMMSIGNIA(mac_src=4C5E0C14D2EA,bc=FFFFFFFFFFFF,eth_type=8947,target_host=10.200.1.101,target_port=7942,sourcePort=7943,its_aid=38,interface_id=2,tx_power=-32)/UDP(dst_ip=192.168.56.1,dst_port=12346,src_ip=192.168.156.4,src_port=12345)/ETH(mac_src=026f8338c1e5,mac_dst=0A0027000011,eth_type=0800)/PCAP(mac_src=0800275c4959,file=../../../testdata/commsignia_61_beacon.pcap,filter=and (udp port 30000 or udp port 7943))"

#system.geoNetworkingPort.params := "GN(ll_address=F8CAB8083918,latitude=43551050,longitude=10298730,beaconing=0,expiry=1000,its_aid=141,secured_mode=0,certificate=ta_cert_nistp256_sha256)/COMMSIGNIA(mac_src=4C5E0C14D2EA,bc=FFFFFFFFFFFF,eth_type=8947,target_host=10.200.1.101,target_port=7942,sourcePort=7943,its_aid=141,interface_id=2,tx_power=-32)/UDP(dst_ip=192.168.56.1,dst_port=12346,src_ip=192.168.156.4,src_port=12345)/ETH(mac_src=026f8338c1e5,mac_dst=0A0027000011,eth_type=0800)/PCAP(mac_src=0800275c4959,file=../../../testdata/commsignia_61_beacon.pcap,filter=and (udp port 30000 or udp port 7943))"

# Multiple GeoNetworking component port

Comp1.geoNetworkingPort.params := "GN(ll_address=F8CAB8083919,latitude=43551050,longitude=10298730,beaconing=1,expiry=1000,its_aid=38)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=F8CAB8083919,nic=,file=../../../testdata/test_1_cam.pcap,filter=and ether proto 0x8947,frame_offset=0,save_mode=0)"

Comp2.geoNetworkingPort.params := "GN(ll_address=F8CAB808391A,latitude=43551050,longitude=10298730,beaconing=1,expiry=1000,its_aid=38)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=F8CAB808391A,nic=,file=../../../testdata/test_1_cam.pcap,filter=and ether proto 0x8947,frame_offset=0,save_mode=0)"

Comp1.geoNetworkingPort.params := "GN(ll_address=F8CAB8083919,latitude=43551050,longitude=10298730,beaconing=1,expiry=1000,its_aid=141)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=F8CAB8083919,nic=,file=../../../testdata/test_1_cam.pcap,filter=and ether proto 0x8947,frame_offset=0,save_mode=0)"

Comp2.geoNetworkingPort.params := "GN(ll_address=F8CAB808391A,latitude=43551050,longitude=10298730,beaconing=1,expiry=1000,its_aid=141)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=F8CAB808391A,nic=,file=../../../testdata/test_1_cam.pcap,filter=and ether proto 0x8947,frame_offset=0,save_mode=0)"



# BTP port

system.btpPort.params := "BTP(type=btpB,dst_port=2000,src_port=0)/GN(ll_address=F8CAB8083918,latitude=43551050,longitude=10298730,expiry=1000,its_aid=38)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=F8CAB8083918,nic=,file=../../../testdata/test_1_cam.pcap,filter=and ether proto 0x8947,frame_offset=0)"

system.btpPort.params := "BTP(type=btpB,dst_port=2000,src_port=0)/GN(ll_address=F8CAB8083918,latitude=43551050,longitude=10298730,expiry=1000,its_aid=141)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=F8CAB8083918,nic=,file=../../../testdata/test_1_cam.pcap,filter=and ether proto 0x8947,frame_offset=0)"



# CAM port

# CAM port using file

#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP(type=btpB,dst_port=2001,src_port=0,device_mode=1)/GN(ll_address=F8CAB8083918,latitude=43551050,longitude=10298730,expiry=1000,beaconing=1,device_mode=1,its_aid=38)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=F8CAB8083918,nic=,file=../../../testdata/test_1_cam.pcap,save_mode=1,filter=and ether proto 0x8947,frame_offset=0)"

#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP(type=btpB,dst_port=2001,src_port=0,device_mode=1)/GN(ll_address=F8CAB8083918,latitude=43551050,longitude=10298730,beaconing=0,expiry=1000,its_aid=141,secured_mode=1,certificate=CERT_TS_A,sec_db_path=/home/vagrant/tmp/Yann)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=F8CAB8083918,nic=,file=../../../testdata/test_1_cam_sec.pcap,save_mode=1,filter=and ether proto 0x8947,frame_offset=0)"

# CAM port using NIC

system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP(type=btpB,dst_port=2001,src_port=0,device_mode=1)/GN(ll_address=F8CAB8083918,latitude=43551050,longitude=10298730,expiry=1000,beaconing=1,device_mode=1,its_aid=38)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=F8CAB8083918,nic=enp0s8,file=,save_mode=1,filter=and ether proto 0x8947,frame_offset=0)"

system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP(type=btpB,dst_port=2001,src_port=0,device_mode=1)/GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,beaconing=0,expiry=1000,its_aid=141,device_mode=1,secured_mode=0,certificate=CERT_TS_A,sec_db_path=/home/vagrant/tmp/Yann)/ETH(mac_src=4C5E0C14D2EA,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=4C5E0C14D2EA,nic=eth1,file=,filter=and ether proto 0x8947,frame_offset=0,save_mode=0)"



# DENM port

# DENM port using file

system.denmPort.params := "DENM(next_header=btpB)/BTP(type=btpB,dst_port=2002,src_port=0,device_mode=1)/GN(ll_address=F8CAB8083918,latitude=43551050,longitude=10298730,expiry=1000,device_mode=1,its_aid=38)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=F8CAB8083918,nic=,file=../../../testdata/test_1_denm.pcap,save_mode=1,filter=and ether proto 0x8947,frame_offset=0)"

#system.denmPort.params := "DENM(next_header=btpB)/BTP(type=btpB,dst_port=2002,src_port=0,device_mode=1)/GN(ll_address=F8CAB8083918,latitude=43551050,longitude=10298730,expiry=1000,device_mode=1,its_aid=141)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=F8CAB8083918,nic=,file=../../../testdata/test_1_denm.pcap,save_mode=1,filter=and ether proto 0x8947,frame_offset=0)"

# DENM port using NIC

#system.denmPort.params := "DENM(next_header=btpB,header_type=tsb)/BTP(type=btpB,dst_port=2002,src_port=0,device_mode=1)/GN(ll_address=F8CAB8083918,latitude=43551050,longitude=10298730,expiry=1000,device_mode=1,its_aid=38)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=F8CAB8083918,nic=enp0s8,file=,save_mode=1,filter=and ether proto 0x8947,frame_offset=0)"

system.denmPort.params := "DENM(next_header=btpB,header_type=gbc)/BTP(type=btpB,dst_port=2002,src_port=0,device_mode=1)/GN(ll_address=F8CAB8083918,latitude=43551050,longitude=10298730,beaconing=0,expiry=1000,its_aid=141,device_mode=1,secured_mode=1,certificate=CERT_TS_A,sec_db_path=/home/vagrant/tmp/Yann)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=F8CAB8083918,nic=eth1,file=,save_mode=1,filter=and ether proto 0x8947,frame_offset=0)"



# IVIM port

system.ivimPort.params := "IVIM/BTP(type=btpB,dst_port=2005,src_port=0,device_mode=1)/GN(ll_address=F8CAB8083918,latitude=43551050,longitude=10298730,expiry=1000,device_mode=1,its_aid=38)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=F8CAB8083918,nic=,file=../../../testdata/test_1_ivim.pcap,save_mode=1,filter=and ether proto 0x8947,frame_offset=0)"

system.ivimPort.params := "IVIM/BTP(type=btpB,dst_port=2005,src_port=0,device_mode=1)/GN(ll_address=F8CAB8083918,latitude=43551050,longitude=10298730,expiry=1000,device_mode=1,its_aid=141)/ETH(mac_src=F8CAB8083918,mac_bc=FFFFFFFFFFFF,eth_type=8947)/PCAP(mac_src=F8CAB8083918,nic=,file=../../../testdata/test_1_ivim.pcap,save_mode=1,filter=and ether proto 0x8947,frame_offset=0)"



# GeoNetworking UpperTester port based on UDP 

system.utPort.params := "UT_GN/UDP(dst_ip=192.168.56.1,dst_port=12346,src_ip=192.168.156.4,src_port=12345)/ETH(mac_src=026f8338c1e5,mac_dst=0A0027000011,eth_type=0800)/PCAP(mac_src=0800275c4959,nic=enp0s8,filter=and udp port 12346)"

system.utPort.params := "UT_GN/UDP(dst_ip=192.168.56.1,dst_port=12346,src_ip=192.168.156.4,src_port=12345)/ETH(mac_src=026f8338c1e5,mac_dst=0A0027000011,eth_type=0800)/PCAP(mac_src=0800275c4959,nic=eth1,filter=and udp port 12346)"



[EXECUTE]

# GeoNetworking Req
@@ -158,7 +159,7 @@ system.utPort.params := "UT_GN/UDP(dst_ip=192.168.56.1,dst_port=12346,src_ip=192 
#TestCodec_GeoNetworking.tc_GeoNet_Port_2          # Use simulator of file to run this test

                                                   # Used to test device_mode=0,beaconing=1,beacon codec

                                                   # With startPassBeaconing

TestCodec_GeoNetworking.tc_GeoNet_Port_3          # Use test beaconing with secured mode set in config file

#TestCodec_GeoNetworking.tc_GeoNet_Port_3          # Use to test beaconing with secured mode set in config file

                                                   # Used to test device_mode=1,beaconing=1,nic

                                                   # Also used to generate secured/unsecured beacons

#TestCodec_GeoNetworking.tc_GeoNet_Port_4          # Use simulator of file to run this test with secured mode set in config file
@@ -196,6 +197,8 @@ TestCodec_GeoNetworking.tc_GeoNet_Port_3 # Use test beaconing with secu 
# To run the CAM port tests, use the offline mode and the test data provided. Use PcapLayer.save_mode to save sent packet into a file

#TestCodec_CAM.tc_Cam_Port          # Use simulator of file to run this test

                                    # Used to test device_mode=1,beaconing=1

#TestCodec_CAM.tc_Cam_Port_1        # Use simulator of file to run this test

                                    # Used to generate CAM message

# CAM UpperTester

#TestCodec_CAM.tc_Cam_UtCamInitialize

#TestCodec_CAM.tc_Cam_UtCamChangePosition
@@ -225,7 +228,8 @@ TestCodec_GeoNetworking.tc_GeoNet_Port_3 # Use test beaconing with secu 
# To run the DENM port tests, use the offline mode and the test data provided. Use PcapLayer.save_mode to save sent packet into a file

#TestCodec_DENM.tc_Denm_Port        # Use simulator of file to run this test

                                    # Used to test device_mode=1,beaconing=1



TestCodec_DENM.tc_Denm_Port_1      # Use simulator of file to run this test

                                    # Used to generate DENM message

#TestCodec_DENM.tc_Denm_Port_utPort

# DENM UpperTester

#TestCodec_DENM.tc_Denm_UtDenmInitialize