Commit 4068611a authored by Denis Filatov's avatar Denis Filatov
Browse files

Add FA and FA3 certificate profiles

parent 564981a8

data/certificates/Makefile

+70 −48
Original line number Diff line number Diff line
@@ -6,20 +6,25 @@ else 
 endif

endif



ifeq (,$(CERTGEN))

 $(error CERTGEN variable shall point to the certgen project)

endif



outdir=certificates

in=profiles

xerdir=xer

depdir=temp

keydir=certificates

iutdir=iut



ifeq ($(ARCH),msvc)

  asn1certgen= ../../../itscertgen/build/msvc/x64/Debug/certgen.exe

  asn1certgen= $(CERTGEN)/build/msvc/x64/Debug/certgen.exe

else

  asn1certgen=../../../itscertgen/build/$(ARCH)-d/certgen

  asn1certgen=$(CERTGEN)/build/$(ARCH)-d/certgen

endif



xsl_cvt=../../../itscertgen/certgen/asn1certgen.xslt

xsl_dep=../../../itscertgen/certgen/prof2dep.xsl

xsl_cvt=$(CERTGEN)/itscertgen/certgen/asn1certgen.xslt

xsl_dep=$(CERTGEN)/itscertgen/certgen/prof2dep.xsl



profiles=$(wildcard $(in)/*.xml)

certificates_oer=$(patsubst $(in)/%.xml, $(outdir)/%.oer, $(profiles))
@@ -28,7 +33,7 @@ deps=$(patsubst $(in)/%.xml, $(depdir)/%.dep, $(profiles)) 


all: $(sort $(outdir) $(xerdir) $(depdir)) $(certificates_oer)



$(sort $(outdir) $(xerdir) $(depdir)):

$(sort $(outdir) $(xerdir) $(depdir) $(iutdir)):

	mkdir -p $@

clean:

	rm -f $(certificates_oer) $(certificates_xer)
@@ -45,4 +50,21 @@ $(deps): $(depdir)/%.dep : $(in)/%.xml 


$(certificates_xer) : $(xsl_cvt)



certs_iut_at = $(filter $(outdir)/CERT_IUT_%_AT.oer, $(certificates_oer))

vkeys_iut_at = $(patsubst %.oer, %.vkey, $(certs_iut_at))

ekeys_iut_at = $(patsubst %.oer, %.ekey, $(certs_iut_at))



certs_iut := $(filter $(outdir)/CERT_IUT_%_RCA.oer, $(certificates_oer))

certs_iut += $(filter $(outdir)/CERT_IUT_%_AA.oer, $(certificates_oer))

certs_iut += $(certs_iut_at)



iut_files = $(patsubst $(outdir)/%, $(iutdir)/%, $(certs_iut) $(vkeys_iut_at) $(ekeys_iut_at))



install: $(iutdir) $(iut_files)



$(iut_files): $(iutdir)/%: $(outdir)/%

	-cp -f $@ $<



$(vkeys_iut_at) $(ekeys_iut_at):



include $(deps)

data/certificates/profiles/CERT_TS_FA3_AA.xml

0 → 100644
+44 −0
Original line number Diff line number Diff line 
<!-- Authorization authority certificate without any region restriction -->

<certificate>

	<version>3</version>

	<signer type="digest" name="CERT_IUT_A_RCA"/>

	<subject type="AA" name="">

		<!-- verification_key -->

		<attribute type="verification_key">

			<public_key algorithm="ecdsa_brainpoolp384k1">

				<ecc_point type="compressed"/>

			</public_key>

		</attribute>

		<!-- encryption_key -->

		<attribute type="encryption_key">

			<public_key sym_alg="0" algorithm="0">

				><ecc_point type="compressed"/>

			</public_key>

		</attribute>

		<!-- assurance_level -->

		<attribute type="assurance_level">

			<assurance level="4" confidence="0"/>

		</attribute>

		<!-- its_aid_list -->

		<attribute type="its_aid_list">

			<aid value="CAM"/>  <!--CAM-->

			<aid value="DENM"/>  <!--DENM-->

			<aid value="SPAT"/> <!-- TLM / SPAT -->

			<aid value="MAP"/> <!-- RLT / MAP-->

			<aid value="IVI"/> <!-- IVI -->

			<aid value="SREM"/> <!-- TLC REQUEST-->

			<aid value="SSEM"/> <!-- TLC RESPONSE -->

			<aid value="GN-MGMT"/> <!-- GN-MGMT -->

		</attribute>

		<attribute type="its_aid_ssp_list">

			<ssp aid="CRT-REQ">01 32</ssp> <!-- Cert request:  -->

		</attribute>

	</subject>

	<validity>

		<restriction type="time" start="-365d" end="+730d"/>

		<restriction type="region">

			<none/>

		</restriction>

	</validity>

	<signature algorithm="0"/>

</certificate>

data/certificates/profiles/CERT_TS_FA3_AT.xml

0 → 100644
+36 −0
Original line number Diff line number Diff line 
<!-- Authorization ticket certificate unknown for IUT -->

<certificate>

	<version>3</version>

	<signer type="digest" name="CERT_TS_FA3_AA"/>

	<subject type="AT" name="">

		<!-- verification_key -->

		<attribute type="verification_key">

			<public_key algorithm="0">

				<ecc_point type="compressed"/>

			</public_key>

		</attribute>

		<!-- encryption_key -->

		<attribute type="encryption_key">

			<public_key sym_alg="0" algorithm="0">

				><ecc_point type="compressed"/>

			</public_key>

		</attribute>

		<!-- assurance_level -->

		<attribute type="assurance_level">

			<assurance level="3"/>

		</attribute>

		<!-- its_aid_ssp_list -->

		<attribute type="its_aid_ssp_list">

			<ssp aid="CAM">01 FF FC</ssp>  <!-- CAM -->

			<ssp aid="DENM">01 FF FF FF</ssp>  <!-- DENM -->

			<ssp aid="GN-MGMT"></ssp> <!--ssp aid="GN-MGMT">00</ssp-->  <!-- GN-MGMT -->

		</attribute>

	</subject>

	<validity>

		<restriction type="time" start="+0d" end="+365d"/>

		<restriction type="region">

			<none/>

		</restriction>

	</validity>

	<signature algorithm="brainpool384"/>

</certificate>

data/certificates/profiles/CERT_TS_FA_AA.xml

0 → 100644
+44 −0
Original line number Diff line number Diff line 
<!-- Authorization authority certificate without any region restriction -->

<certificate>

	<version>3</version>

	<signer type="digest" name="CERT_IUT_A_RCA"/>

	<subject type="AA" name="">

		<!-- verification_key -->

		<attribute type="verification_key">

			<public_key algorithm="ecdsa_nistp256_with_sha256">

				<ecc_point type="compressed"/>

			</public_key>

		</attribute>

		<!-- encryption_key -->

		<attribute type="encryption_key">

			<public_key sym_alg="0" algorithm="0">

				><ecc_point type="compressed"/>

			</public_key>

		</attribute>

		<!-- assurance_level -->

		<attribute type="assurance_level">

			<assurance level="4" confidence="0"/>

		</attribute>

		<!-- its_aid_list -->

		<attribute type="its_aid_list">

			<aid value="CAM"/>  <!--CAM-->

			<aid value="DENM"/>  <!--DENM-->

			<aid value="SPAT"/> <!-- TLM / SPAT -->

			<aid value="MAP"/> <!-- RLT / MAP-->

			<aid value="IVI"/> <!-- IVI -->

			<aid value="SREM"/> <!-- TLC REQUEST-->

			<aid value="SSEM"/> <!-- TLC RESPONSE -->

			<aid value="GN-MGMT"/> <!-- GN-MGMT -->

		</attribute>

		<attribute type="its_aid_ssp_list">

			<ssp aid="CRT-REQ">01 32</ssp> <!-- Cert request:  -->

		</attribute>

	</subject>

	<validity>

		<restriction type="time" start="-365d" end="+730d"/>

		<restriction type="region">

			<none/>

		</restriction>

	</validity>

	<signature algorithm="0"/>

</certificate>

data/certificates/profiles/CERT_TS_FA_AT.xml

0 → 100644
+36 −0
Original line number Diff line number Diff line 
<!-- Authorization ticket certificate unknown for IUT -->

<certificate>

	<version>3</version>

	<signer type="digest" name="CERT_TS_FA_AA"/>

	<subject type="AT" name="">

		<!-- verification_key -->

		<attribute type="verification_key">

			<public_key algorithm="0">

				<ecc_point type="compressed"/>

			</public_key>

		</attribute>

		<!-- encryption_key -->

		<attribute type="encryption_key">

			<public_key sym_alg="0" algorithm="0">

				><ecc_point type="compressed"/>

			</public_key>

		</attribute>

		<!-- assurance_level -->

		<attribute type="assurance_level">

			<assurance level="3"/>

		</attribute>

		<!-- its_aid_ssp_list -->

		<attribute type="its_aid_ssp_list">

			<ssp aid="CAM">01 FF FC</ssp>  <!-- CAM -->

			<ssp aid="DENM">01 FF FF FF</ssp>  <!-- DENM -->

			<ssp aid="GN-MGMT"></ssp> <!--ssp aid="GN-MGMT">00</ssp-->  <!-- GN-MGMT -->

		</attribute>

	</subject>

	<validity>

		<restriction type="time" start="+0d" end="+365d"/>

		<restriction type="region">

			<none/>

		</restriction>

	</validity>

	<signature algorithm="0"/>

</certificate>

Makefile

+150 −150

File changed.

Contains only whitespace changes.