Commit 093d24ab authored by YannGarcia's avatar YannGarcia
Browse files

CV2X#3 Validation against PKIs (Remote)

parent 5d47bb18

ccsrc/Externals/LibItsCommon_externals.cc

+1 −1
Original line number Original line Diff line number Diff line
@@ -25,7 +25,7 @@ namespace LibItsCommon__Functions { 
  }

  }

  /**

  /**

   * @desc    This external function gets the current time since 01/01/1970 in UTC format

   * @desc    This external function gets the current time since 01/01/1970 in UTC format

   * @return  The current time since 01/01/1970 in UTC format

   * @return  The current time since 01/01/1970 in UTC format in milliseconds

   * @see     fx_getCurrentTimeUtc() return UInt64

   * @see     fx_getCurrentTimeUtc() return UInt64

   */

   */

  INTEGER fx__getCurrentTimeUtc() {

  INTEGER fx__getCurrentTimeUtc() {

etc/AtsPki/AtsPki_Atos.cfg_

+9 −11
Original line number Original line Diff line number Diff line
@@ -31,10 +31,10 @@ LibItsPki_Pics.PICS_HEADER_HOST_TLM := "0.atos-dc.l0.c-its-pki.eu" 
LibItsPki_Pics.PICS_HTTP_POST_URI_EC   := "/"

LibItsPki_Pics.PICS_HTTP_POST_URI_EC   := "/"

LibItsPki_Pics.PICS_HTTP_POST_URI_AT   := "/"

LibItsPki_Pics.PICS_HTTP_POST_URI_AT   := "/"

LibItsPki_Pics.PICS_HTTP_POST_URI_ATV  := "/"

LibItsPki_Pics.PICS_HTTP_POST_URI_ATV  := "/"

LibItsPki_Pics.PICS_HTTP_GET_URI_CA    := "/getcacerts/347A3B143C94C298"

#LibItsPki_Pics.PICS_HTTP_GET_URI_CA    := "/getcacerts/347A3B143C94C298"

LibItsPki_Pics.PICS_HTTP_GET_URI_CTL   := "/getctl/347A3B143C94C298"

#LibItsPki_Pics.PICS_HTTP_GET_URI_CTL   := "/getctl/347A3B143C94C298"

LibItsPki_Pics.PICS_HTTP_GET_URI_CRL   := "/getcrl/347A3B143C94C298"

#LibItsPki_Pics.PICS_HTTP_GET_URI_CRL   := "/getcrl/347A3B143C94C298"

LibItsPki_Pics.PICS_HTTP_GET_URI_ECTL  := "/getectl/0DA3EE9ACF7F9F14"

#systemLibItsPki_Pics.PICS_HTTP_GET_URI_ECTL  := "/getectl/0DA3EE9ACF7F9F14"





LibItsPki_Pics.PICS_SIMULATE_EA_ENTITY    := true # CERT_TS_A_EA shall be trusted by the PKI

LibItsPki_Pics.PICS_SIMULATE_EA_ENTITY    := true # CERT_TS_A_EA shall be trusted by the PKI

LibItsPki_Pics.PICS_TS_EA_CERTIFICATE_ID  := "CERT_TS_A_EA" # "ATOS_EA_D41845A1F71C356A" # Use CERT_TS_A_EA when the TS simulate the EA (TC_SECPKI_AA_AUTHVAL_01_BV) with PICS_SIMULATE_EA_ENTITY set

LibItsPki_Pics.PICS_TS_EA_CERTIFICATE_ID  := "CERT_TS_A_EA" # "ATOS_EA_D41845A1F71C356A" # Use CERT_TS_A_EA when the TS simulate the EA (TC_SECPKI_AA_AUTHVAL_01_BV) with PICS_SIMULATE_EA_ENTITY set
@@ -64,15 +64,10 @@ LibItsPki_Pics.PICS_ITS_S_SIGN_NISTP256_PUBLIC_KEY := '038038f5490cd5a58ff5465d3 
#LibItsPki_Pics.PICS_SECPKI_REENROLMENT := false # Check in logs the pattern '==> EC ' to find the required information for re-enrolment

#LibItsPki_Pics.PICS_SECPKI_REENROLMENT := false # Check in logs the pattern '==> EC ' to find the required information for re-enrolment





# URI to request CTL

# URI to request CTL

LibItsPki_Pics.PICS_HTTP_POST_URI_DC := "/dc"

LibItsPki_Pics.PICS_HTTP_POST_URI_CTL := "/ctl"

LibItsPki_Pics.PICS_HTTP_POST_URI_CRL := "/crl"

LibItsPki_Pics.PICS_DC_ENDPOINT := "http://yanngarcia.ddns.net/dc"

LibItsPki_Pics.PICS_DC_ENDPOINT := "http://yanngarcia.ddns.net/dc"

LibItsPki_Pics.PICS_AA_ENDPOINT := "http://yanngarcia.ddns.net/aa"

LibItsPki_Pics.PICS_AA_ENDPOINT := "http://yanngarcia.ddns.net/aa"

LibItsPki_Pics.PICS_EA_ENDPOINT := "http://yanngarcia.ddns.net/ea"

LibItsPki_Pics.PICS_EA_ENDPOINT := "http://yanngarcia.ddns.net/ea"









#LibItsPki_Pixits.PX_INCLUDE_ENCRYPTION_KEYS := false # No encryption key in Authorization request

#LibItsPki_Pixits.PX_INCLUDE_ENCRYPTION_KEYS := false # No encryption key in Authorization request





#LibItsPki_Pixits.PX_VE_ALG             := e_brainpool_p256_r1 # e_nist_p256, e_brainpool_p256_r1 or e_brainpool_p384_r1

#LibItsPki_Pixits.PX_VE_ALG             := e_brainpool_p256_r1 # e_nist_p256, e_brainpool_p256_r1 or e_brainpool_p384_r1
@@ -107,7 +102,9 @@ system.httpAtPort.params := "HTTP(codecs=http_its:http_etsi_ieee1609dot2_codec)/ 




#system.httpCaPort.params := "HTTP(codecs=http_its:http_etsi_ieee1609dot2_codec)/TCP(debug=1,server=0.atos-dc.l0.c-its-pki.eu)"

#system.httpCaPort.params := "HTTP(codecs=http_its:http_etsi_ieee1609dot2_codec)/TCP(debug=1,server=0.atos-dc.l0.c-its-pki.eu)"

system.httpCaPort.params := "HTTP(codecs=http_its:http_etsi_ieee1609dot2_codec)/TCP(debug=1,server_mode=1,server=192.168.1.43)"

system.httpCaPort.params := "HTTP(codecs=http_its:http_etsi_ieee1609dot2_codec)/TCP(debug=1,server_mode=1,server=192.168.1.43)"



system.httpTlmPort.params := "HTTP(codecs=http_its:http_etsi_ieee1609dot2_codec)/TCP(debug=1,server=0.atos-dc.l0.c-its-pki.eu)"

system.httpTlmPort.params := "HTTP(codecs=http_its:http_etsi_ieee1609dot2_codec)/TCP(debug=1,server=0.atos-dc.l0.c-its-pki.eu)"

#system.httpTlmPort.params := "HTTP(codecs=http_its:http_etsi_ieee1609dot2_codec)/TCP(debug=1,server_mode=1,server=192.168.1.43)"





[EXECUTE]

[EXECUTE]

# Config:

# Config:
@@ -201,7 +198,7 @@ system.httpTlmPort.params := "HTTP(codecs=http_its:http_etsi_ieee1609dot2_codec) 
# Check that the AA sends AuthorizationValidationRequest after receiving of the AuthorizationRequest

# Check that the AA sends AuthorizationValidationRequest after receiving of the AuthorizationRequest

#ItsPki_TestCases.TC_SECPKI_AA_AUTHVAL_01_BV

#ItsPki_TestCases.TC_SECPKI_AA_AUTHVAL_01_BV

# Check that the AuthorizationValidationRequest message is encrypted using approved algorithm and sent to only one Enrolment Authority

# Check that the AuthorizationValidationRequest message is encrypted using approved algorithm and sent to only one Enrolment Authority

ItsPki_TestCases.TC_SECPKI_AA_AUTHVAL_02_BV

#ItsPki_TestCases.TC_SECPKI_AA_AUTHVAL_02_BV





# Check that the EA/AA is able to decrypt the AuthorizationRequest message using the encryption private key corresponding to the recipient certificate...

# Check that the EA/AA is able to decrypt the AuthorizationRequest message using the encryption private key corresponding to the recipient certificate...

#ItsPki_TestCases.TC_SECPKI_AA_AUTH_RCV_01_BV

#ItsPki_TestCases.TC_SECPKI_AA_AUTH_RCV_01_BV
@@ -294,7 +291,8 @@ ItsPki_TestCases.TC_SECPKI_AA_AUTHVAL_02_BV 
# Config:

# Config:

#   system.httpCaPort.params := TCP(debug=1,server_mode=1,server=192.168.1.43)

#   system.httpCaPort.params := TCP(debug=1,server_mode=1,server=192.168.1.43)

# Await CTL request and provides "CERT_IUT_A_RCA", "CERT_TS_A_AA", "CERT_TS_A_EA" certificates

# Await CTL request and provides "CERT_IUT_A_RCA", "CERT_TS_A_AA", "CERT_TS_A_EA" certificates

#ItsPki_TestCases.TC_RCA_CTLGEN_xx_BV

# PKI platform simu

ItsPki_TestCases.TC_PKI_PLTF_RCV_BV_01





[MAIN_CONTROLLER]

[MAIN_CONTROLLER]

# The options herein control the behavior of MC.

# The options herein control the behavior of MC.

etc/AtsPki/AtsPki_Etas.cfg_

+1 −1
Original line number Original line Diff line number Diff line
@@ -23,7 +23,7 @@ LibItsPki_Pics.PICS_HTTP_POST_URI_AT := "/aa/authorization" 
LibItsPki_Pics.PICS_HTTP_POST_URI_ATV  := "/ea/validation"

LibItsPki_Pics.PICS_HTTP_POST_URI_ATV  := "/ea/validation"

#LibItsPki_Pics.PICS_HTTP_GET_URI_CTL   := "/getctl/1D3C7B499A054F8C";

#LibItsPki_Pics.PICS_HTTP_GET_URI_CTL   := "/getctl/1D3C7B499A054F8C";

#LibItsPki_Pics.PICS_HTTP_GET_URI_CRL   := "/getcrl/1D3C7B499A054F8C";

#LibItsPki_Pics.PICS_HTTP_GET_URI_CRL   := "/getcrl/1D3C7B499A054F8C";

#LibItsPki_Pics.PICS_HTTP_GET_URI_ECTL  := "/data/certificates/ectl/ECTL_TEST_ETSI-PLUGTEST_6.0_2019-11-07.oer"

#LibItsPki_Pics.PICS_HTTP_GET_URI_TLM  := "/data/certificates/ectl/ECTL_TEST_ETSI-PLUGTEST_6.0_2019-11-07.oer"





#LibItsPki_Pics.PICS_SIMULATE_EA_ENTITY    := true # CERT_TS_A_EA shall be trusted by the PKI

#LibItsPki_Pics.PICS_SIMULATE_EA_ENTITY    := true # CERT_TS_A_EA shall be trusted by the PKI

LibItsPki_Pics.PICS_TS_EA_CERTIFICATE_ID  := "ETAS_EA_c155ccf01bc5e6ad"  # Use CERT_TS_A_EA when the TS simulate the EA (TC_SECPKI_AA_AUTHVAL_01_BV) with PICS_SIMULATE_EA_ENTITY set

LibItsPki_Pics.PICS_TS_EA_CERTIFICATE_ID  := "ETAS_EA_c155ccf01bc5e6ad"  # Use CERT_TS_A_EA when the TS simulate the EA (TC_SECPKI_AA_AUTHVAL_01_BV) with PICS_SIMULATE_EA_ENTITY set

etc/AtsPki/AtsPki_Microsec.cfg_

+1 −4
Original line number Original line Diff line number Diff line
@@ -21,7 +21,7 @@ LibItsPki_Pics.PICS_HTTP_POST_URI_AT := "/v2x_aa_nistp256/atRequest" 
LibItsPki_Pics.PICS_HTTP_POST_URI_ATV     := "/v2x_ea_nistp256/authValRequest"

LibItsPki_Pics.PICS_HTTP_POST_URI_ATV     := "/v2x_ea_nistp256/authValRequest"

LibItsPki_Pics.PICS_HTTP_GET_URI_CTL      := "/v2x_rootca_nistp256/getctl/B65E3B8FBBEC3910"

LibItsPki_Pics.PICS_HTTP_GET_URI_CTL      := "/v2x_rootca_nistp256/getctl/B65E3B8FBBEC3910"

LibItsPki_Pics.PICS_HTTP_GET_URI_CRL      := "/v2x_rootca_nistp256/getcrl/B65E3B8FBBEC3910"

LibItsPki_Pics.PICS_HTTP_GET_URI_CRL      := "/v2x_rootca_nistp256/getcrl/B65E3B8FBBEC3910"

LibItsPki_Pics.PICS_HTTP_GET_URI_ECTL     := "/v2x_rootca_brainpoolp256r1"

LibItsPki_Pics.PICS_HTTP_GET_URI_TLM     := "/v2x_rootca_brainpoolp256r1"





#LibItsPki_Pics.PICS_SIMULATE_EA_ENTITY    := true # CERT_TS_A_EA shall be trusted by the PKI

#LibItsPki_Pics.PICS_SIMULATE_EA_ENTITY    := true # CERT_TS_A_EA shall be trusted by the PKI

LibItsPki_Pics.PICS_TS_EA_CERTIFICATE_ID  := "MICROSEC_EA_77C0DE13A375774D"  # Use CERT_TS_A_EA when the TS simulate the EA (TC_SECPKI_AA_AUTHVAL_01_BV) with PICS_SIMULATE_EA_ENTITY set

LibItsPki_Pics.PICS_TS_EA_CERTIFICATE_ID  := "MICROSEC_EA_77C0DE13A375774D"  # Use CERT_TS_A_EA when the TS simulate the EA (TC_SECPKI_AA_AUTHVAL_01_BV) with PICS_SIMULATE_EA_ENTITY set
@@ -50,9 +50,6 @@ LibItsPki_Pics.PICS_ITS_S_SIGN_NISTP256_PUBLIC_KEY := '038038f5490cd5a58ff5465d3 
                                                               # Required for SECPKI_AA_AUTH_RCV_02_BV

                                                               # Required for SECPKI_AA_AUTH_RCV_02_BV

#LibItsPki_Pics.PICS_SECPKI_REENROLMENT := false # Check in logs the pattern '==> EC ' to find the required information for re-enrolment

#LibItsPki_Pics.PICS_SECPKI_REENROLMENT := false # Check in logs the pattern '==> EC ' to find the required information for re-enrolment





# URI to request CTL

LibItsPki_Pics.PICS_HTTP_POST_URI_DC := "/ctl"



#LibItsPki_Pixits.PX_INCLUDE_ENCRYPTION_KEYS := false # No encryption key in Authorization request

#LibItsPki_Pixits.PX_INCLUDE_ENCRYPTION_KEYS := false # No encryption key in Authorization request





#LibItsPki_Pixits.PX_VE_ALG             := e_brainpool_p256_r1 # e_nist_p256 or e_brainpool_p384_r1

#LibItsPki_Pixits.PX_VE_ALG             := e_brainpool_p256_r1 # e_nist_p256 or e_brainpool_p384_r1

AtsPki @ ba3b34d0

Compare 710005fb to ba3b34d0
Original line number Original line Diff line number Diff line 
Subproject commit 710005fbc65dd5656d95cd9af4ed335609e4f751
 
Subproject commit ba3b34d02b0307ee7419053eb79f13dae07cf530