Commit 747ad237 authored by Yann Garcia's avatar Yann Garcia
Browse files

Enhance TC_SECPKI_EA_BFK_AUTH_06_BV

parent 7e7a7ff3

ccsrc/Protocols/Security/module.mk

+1 −0
Original line number Diff line number Diff line
@@ -30,6 +30,7 @@ endif 


ifeq (AtsMBR, $(ATS))

sources += http_etsi_ieee1609dot2_codec.cc \

           http_etsi_ieee1609dot2dot1_codec.cc \



endif

etc/AtsCAM/AtsCAM.cfg

+17 −25
Original line number Diff line number Diff line
@@ -13,11 +13,12 @@ LibItsCam_Pics.PICS_IS_IUT_SECURED := true 
[LOGGING]

# In this section you can specify the name of the log file and the classes of events

# you want to log into the file or display on console (standard error).



LogFile := "../logs/AtsCAM/%e.%h-%r.%s"

FileMask := LOG_ALL | USER | DEBUG | MATCHING

ConsoleMask := LOG_ALL | USER | DEBUG | MATCHING

#FileMask := ERROR | WARNING | USER | PORTEVENT | MATCHING | EXECUTOR_RUNTIME | TIMEROP | VERDICTOP

#ConsoleMask := ERROR | WARNING | USER | PORTEVENT | MATCHING | EXECUTOR_RUNTIME | TIMEROP | VERDICTOP

#FileMask := ERROR | WARNING | USER | MATCHING | EXECUTOR_RUNTIME | VERDICTOP

#ConsoleMask := ERROR | WARNING | USER | MATCHING | EXECUTOR_RUNTIME | VERDICTOP

LogSourceInfo := Stack

LogEntityName:= Yes

LogEventTypes:= Yes
@@ -39,7 +40,7 @@ LogEventTypes:= Yes 
#   device_mode     : Set to 1 if the layer shall encapsulate upper layer PDU

#   device_mode     : Set to 1 if the layer shall encapsulate upper layer PDU

# GN Layer

#   ll_address             : GeoNetworking address of the Test System for beaconing. To be align with CAM 

#   ll_address             : GeoNetworking address of the Test System

#   latitude               : Latitude of the Test System

#   longitude              : Longitude of the Test System

#   beaconing              : Set to 1 if GnLayer shall start beaconing
@@ -52,8 +53,11 @@ LogEventTypes:= Yes 
#   hash                   : Hash algorithm to be used when secured mode is set

#                            Authorized values are SHA-256 or SHA-384

#                            Default: SHA-256

#   signature              : Signature algorithm to be used when secured mode is set

#                            Authorized values are NISTP-256, NISTP-384, BP-256 and BP-384

#                            Default: NISTP-256

#   cypher                 : Cyphering algorithm to be used when secured mode is set

#                            Authorized values are NISTP-256 and BP-256

#                            Authorized values are NISTP-256, BP-256 and BP-384

#                            Default: NISTP-256

# Ethernet layer

#   mac_src  :Source MAC address
@@ -88,28 +92,21 @@ LogEventTypes:= Yes 
#     save_mode   : Set to 1 to save sent packet, 0 otherwise



# Cygwin

#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=515340240,longitude=139274330,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=1,sec_db_path=../data/certificates/certificates)/ETH(mac_src=e2b7b30429eb)/PCAP(mac_src=e2b7b30429eb,nic=CEBB111F-D749-4B40-8B4D-DBB060E90987,filter=and ether proto 0x8947)"

#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=0,sec_db_path=../data/certificates/certificates)/ETH(mac_src=e2b7b30429eb)/PCAP(mac_src=e2b7b30429eb,nic=CEBB111F-D749-4B40-8B4D-DBB060E90987,filter=and ether proto 0x8947)"

# Linux

system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=515340240,longitude=139274330,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=1,sec_db_path=../data/certificates/certificates)/ETH(mac_src=8c554ac1eee0)/PCAP(mac_src=8c554ac1eee0,nic=wlp0s20f3,filter=and ether proto 0x8947)"

#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=1,sec_db_path=../data/certificates/certificates)/ETH(mac_src=dc536045af7e)/PCAP(mac_src=dc536045af7e,nic=wlp2s0,filter=and ether proto 0x8947)"

# Linux over UDP

#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=515340240,longitude=139274330,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=1,sec_db_path=../data/certificates/certificates)/ETH(mac_src=8c554ac1eee0)/UDP(dst_ip=192.168.1.43,src_port=4041,dst_port=9091)"



# PC5 + UU/Raw

#system.geoNetworkingPort.params := "GN(ll_address=4C5E0C14D2EB,latitude=515340240,longitude=139274330,its_aid=36,secured_mode=1,certificate=CERT_IUT_A_AT,sec_db_path=../data/certificates/certificates_iut)/LTE(mac_src=8c554ac1eee1,nic=wlp0s20f3,filter=and ether proto 0x8947,pc5_layer=QUALCOMM,uu_protocol=raw,uu_transport=udp,dst_ip=192.168.1.43,dst_port=4041,src_port=9091)"

# PC5 + Uu/MQTT

#   Raw UDP

#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=515340240,longitude=139274330,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=1,sec_db_path=../data/certificates/certificates)/LTE(mac_src=8c554ac1eee0,nic=wlp0s20f3,filter=and ether proto 0x8947,pc5_layer=QUALCOMM,uu_protocol=mqtt,mqtt_client_id=8c554ac1eee0,mqtt_topics=rsu,uu_transport=udp,debug=1,server=192.168.1.39,port=1883)"

#   MQTT over TCP

#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=515340240,longitude=139274330,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=1,sec_db_path=../data/certificates/certificates)/LTE(mac_src=8c554ac1eee0,nic=wlp0s20f3,filter=and ether proto 0x8947,pc5_layer=QUALCOMM,uu_protocol=mqtt,mqtt_client_id=8c554ac1eee0,mqtt_topics=rsu,uu_transport=tcp,debug=1,server=192.168.1.39,port=1883)"

#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=0,sec_db_path=../data/certificates/certificates)/ETH(mac_src=dc536045af7e)/UDP(dst_ip=192.168.146.26,src_port=4041,dst_port=9091)"

system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=1,sec_db_path=../data/certificates/certificates)/ETH(mac_src=dc536045af7e)/PCAP(mac_src=dc536045af7e,nic=tun0,filter=and ether proto 0x8947)"



# CAM UpperTester port based on UDP

system.utPort.params := "UT_CAM/UDP(dst_ip=192.168.1.43,dst_port=12345,src_port=12346)"

#system.utPort.params := "UT_CAM/UDP(dst_ip=127.0.0.1,dst_port=12345,src_port=12346)"

#system.utPort.params := "UT_CAM/UDP(dst_ip=192.168.146.26)"

#system.utPort.params := "UT_CAM/UDP(dst_ip=172.16.35.1)"

system.utPort.params := "UT_CAM/UDP(dst_ip=10.8.0.6)"



[EXECUTE]

#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_01

ItsCam_TestCases.TC_CAM_MSD_FMT_BV_02

ItsCam_TestCases.TC_CAM_MSD_FMT_BV_01

#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_02

#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_03

#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_04

#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_05
@@ -155,13 +152,8 @@ ItsCam_TestCases.TC_CAM_MSD_FMT_BV_02 
#ItsCam_TestCases.TC_CAM_MSD_INA_BV_06

#ItsCam_TestCases.TC_CAM_MSD_INA_BV_07

#ItsCam_TestCases.TC_CAM_MSD_INA_BV_08

#ItsCam_TestCases.TC_CAM_MSP_BV_01

#ItsCam_TestCases.TC_CAM_MSP_SSP_BV_01

#ItsCam_TestCases.TC_CAM_MSP_SSP_BV_02

#ItsCam_TestCases.TC_CAM_MSP_SSP_BV_03

#ItsCam_TestCases.TC_CAM_MSD_SSP_BO_01

#ItsCam_TestCases.TC_CAM_MSD_SSP_BO_02

#ItsCam_TestCases.TC_CAM_MSD_SSP_BO_03

#ItsCam_TestCases.TC_CAM_MSP_BV_01



[MAIN_CONTROLLER]

# The options herein control the behavior of MC.

etc/AtsCAM/AtsCAM_Yogoko.cf_

+4 −4
Original line number Diff line number Diff line
@@ -97,18 +97,18 @@ LogEventTypes:= Yes 
#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=1,sec_db_path=../data/certificates/certificates)/ETH(mac_src=dc536045af7e)/PCAP(mac_src=dc536045af7e,nic=wlp2s0,filter=and ether proto 0x8947)"

# Linux over UDP

#system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=0,sec_db_path=../data/certificates/certificates)/ETH(mac_src=dc536045af7e)/UDP(dst_ip=192.168.146.26,src_port=4041,dst_port=9091)"

system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=0,sec_db_path=../data/certificates/certificates)/ETH(mac_src=dc536045af7e)/PCAP(mac_src=dc536045af7e,nic=tap0,filter=and ether proto 0x8947)"

system.camPort.params := "CAM(next_header=btpB,header_type=tsb,header_sub_type=sh)/BTP/GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=1,secured_mode=1,sec_db_path=../data/certificates/certificates)/ETH(mac_src=dc536045af7e)/PCAP(mac_src=dc536045af7e,nic=tun0,filter=and ether proto 0x8947)"



# CAM UpperTester port based on UDP

#system.utPort.params := "UT_CAM/UDP(dst_ip=127.0.0.1,dst_port=12345,src_port=12346)"

#system.utPort.params := "UT_CAM/UDP(dst_ip=192.168.146.26)"

system.utPort.params := "UT_CAM/UDP(dst_ip=172.16.35.1)"

system.utPort.params := "UT_CAM/UDP(dst_ip=10.8.0.6)"



[EXECUTE]

#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_01

ItsCam_TestCases.TC_CAM_MSD_FMT_BV_01

#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_02

#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_03

ItsCam_TestCases.TC_CAM_MSD_FMT_BV_04

#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_04

#ItsCam_TestCases.TC_CAM_MSD_FMT_BV_05

#ItsCam_TestCases.TC_CAM_MSD_INA_BV_01_01

#ItsCam_TestCases.TC_CAM_MSD_INA_BV_01_02

etc/AtsMBR/AtsMBR.cfg

+5 −5
Original line number Diff line number Diff line
@@ -135,22 +135,22 @@ LogEventTypes:= Yes 
# Cygwin

#system.geoNetworkingPort.params := "GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=0,secured_mode=0,beacon_secured_mode=1,sec_db_path=../data/certificates/certificates)/ETH(mac_src=e2b7b30429eb)/PCAP(mac_src=e2b7b30429eb,nic=CEBB111F-D749-4B40-8B4D-DBB060E90987,filter=and ether proto 0x8947)"

# Linux

system.geoNetworkingPort.params := "GN(ll_address=4C5E0C14D2EA,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=0,secured_mode=0,beacon_secured_mode=1,sec_db_path=../data/certificates/certificates)/ETH(mac_src=8c554ac1eee0)/PCAP(mac_src=8c554ac1eee0,nic=wlo1,filter=and ether proto 0x8947)"

#system.geoNetworkingPort.params := "GN(ll_address=4C5E0C14D2EB,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=0,secured_mode=0,beacon_secured_mode=1,its_aid=36)/ETH(mac_src=8c554ac1eee0)/PCAP(mac_src=8c554ac1eee0,nic=wlo1,filter=and ether proto 0x8947)"

# Linux over UDP

#system.geoNetworkingPort.params := "GN(ll_address=4C5E0C14D2EB,latitude=43551050,longitude=10298730,distanceA=1500,distanceB=1500,angle=0,device_mode=0,secured_mode=0,beacon_secured_mode=1,its_aid=36)/ETH(mac_src=8c554ac1eee0)/UDP(dst_ip=192.168.1.39,src_port=4041,dst_port=9091)"



# For all test where IUT is not MA, uncomment this port

system.httpPort.params := "HTTP(codecs=http_its:http_etsi_ieee1609dot2_codec)/TCP(debug=1,server_mode=1,server=192.168.1.39)"

#system.httpPort.params := "HTTP(codecs=http_its:http_etsi_ieee1609dot2_codec)/TCP(debug=1,server_mode=1,server=192.168.1.39)"

system.httpPort.params := "HTTP(codecs=http_its:http_etsi_ieee1609dot2_codec)/TCP(debug=1,server_mode=1,server=10.8.0.1)"

# For TC_MRS_MA_SEC_BO_01 & TC_MRS_MA_SEC_BO_01 Use this port and comment the one above

#system.httpPort.params := "HTTP(codecs=http_its:http_etsi_ieee1609dot2_codec)/TCP(debug=1,server=192.168.1.39,port=18000)"



system.utMbrPort.params := "UT_MBR/UDP(dst_ip=192.168.1.39,dst_port=12345,src_port=12346)"

#system.utMbrPort.params := "UT_MBR/UDP(dst_ip=192.168.1.39,dst_port=12345,src_port=12346)"

system.utMbrPort.params := "UT_MBR/UDP(dst_ip=10.8.0.2,dst_port=12345,src_port=12346)"



[EXECUTE]



# Check that the IUT generates an encrypted MBR message

#ItsMbr_TestCases.TC_MRS_ITSS_SEC_BV_01



# Check that the IUT discards an encrypted MBR message when recipientId does not contain MA certificate

# Set local_port to 18000 for AtsRSUsSimulator
@@ -181,7 +181,7 @@ system.utMbrPort.params := "UT_MBR/UDP(dst_ip=192.168.1.39,dst_port=12345,src_po 
#ItsMbr_TestCases.TC_MRS_ITSS_MESSAGES_BV_01



# Check that the IUT generates an invalid speed value observation on a CAM in the MR message when requested (Class 1) - obs-Speed-ValueTooLarge-VehicleType (e.g. A cycle with a speed of 100km/h) 

ItsMbr_TestCases.TC_MRS_ITSS_MESSAGES_CLASS1_CAM_BV_01

#ItsMbr_TestCases.TC_MRS_ITSS_MESSAGES_CLASS1_CAM_BV_01



# Check that the IUT generates an invalid speed value in reverse driving observation on a CAM in the MR message when requested (Class 1) - obs-Speed-ValueTooLarge-DriveDirectionReverse

#ItsMbr_TestCases.TC_MRS_ITSS_MESSAGES_CLASS1_CAM_BV_02

etc/AtsPki/AtsPki_Simu.cfg_

+31 −17
Original line number Diff line number Diff line
@@ -11,13 +11,20 @@ LibItsGeoNetworking_Pics.PICS_GN_LOCAL_GN_ADDR := { 


LibItsGeoNetworking_Pixits.PX_GN_UPPER_LAYER := e_btpB



LibItsBtp_Pixits.PX_DESTINATION_PORT      := 2001

LibItsBtp_Pixits.PX_DESTINATION_PORT_INFO := 2001



# Enable Security support

LibItsGeoNetworking_Pics.PICS_GN_SECURITY := true

LibItsGeoNetworking_Pixits.PX_NEIGHBOUR_DISCOVERY_DELAY := 2.0



# Root path to access certificate stored in files, identified by certficate ID

LibItsSecurity_Pixits.PX_CERTIFICATE_POOL_PATH := "../data/certificates"



# Configuration sub-directory to access certificate stored in files

LibItsSecurity_Pixits.PX_IUT_SEC_CONFIG_NAME := "certificates"



#LibItsSecurity_Pics.PICS_SEC_FIXED_KEYS := true # Seed

LibItsSecurity_Pixits.PX_BFK_TEST_VECTORS := false



# Use this certificate if the RSU simulator act as IUT
@@ -26,7 +33,7 @@ LibItsCommon_Pixits.PX_CERT_FOR_TS := "CERT_IUT_A_AT" 
LibHttp_Pics.PICS_HEADER_CONTENT_TYPE     := "application/x-its-request"

LibHttp_Pics.PICS_HEADER_CTL_CONTENT_TYPE := "application/x-its-crl"



LibHttp_Pics.PICS_HEADER_HOST := "192.168.1.43"

LibHttp_Pics.PICS_HEADER_HOST := "192.168.1.21"



LibItsPki_Pics.PICS_HTTP_POST_URI_EC              := "/ea/enrolment"

LibItsPki_Pics.PICS_HTTP_POST_URI_AT              := "/aa/authorization"
@@ -37,13 +44,6 @@ LibItsPki_Pics.PICS_IUT_ITS_S_ROLE := true 
LibItsPki_Pics.PICS_SECPKI_ENROLMENT       := true

LibItsPki_Pics.PICS_SECPKI_ENROLLMENT_X509 := false



LibItsPki_Pics.PICS_TS_EA_CERTIFICATE_ID                   := "CERT_TS_A_EA"

LibItsPki_Pics.PICS_TS_AA_CERTIFICATE_ID                   := "CERT_TS_A_AA"



LibItsPki_Pics.PICS_ITS_S_CANONICAL_ID                := '455453492D5465737453797374656D2D3031'O # Nist-P256

#LibItsPki_Pics.PICS_ITS_S_CANONICAL_ID               := '455453492D5465737453797374656D2D3032'O # Brainpool-P256 r1

#LibItsPki_Pics.PICS_ITS_S_CANONICAL_ID               := '455453492D5465737453797374656D2D3033'O # Brainpool-P384 r1



# Technical keys

# NOTE: In case of OBU is the IUT, PICS_ITS_S_SIGN_xxx_PUBLIC_KEY is shared with the IUT (process of registration)

# Private key
@@ -52,15 +52,35 @@ LibItsPki_Pics.PICS_ITS_S_CANONICAL_ID := '455453492D546573745379 
#048038F5490CD5A58FF5465D3B577EE830047336AC5DAC07036B798AAECAE7273FD91C4F60995494EA949E64EE0E3D768DBDEB8AFC345627211E3FC4DD8FD39EE5

LibItsPki_Pics.PICS_ITS_S_SIGN_NITSP256_PRIVATE_KEY := 'FE95786F01D7E1666CCDFAB7BAEE9BF9B30BBEA15A838A58994E65E684A8BB34'O;

LibItsPki_Pics.PICS_ITS_S_SIGN_NISTP256_PUBLIC_KEY := '038038f5490cd5a58ff5465d3b577ee830047336ac5dac07036b798aaecae7273f'O;

#LibItsPki_Pics.PICS_ITS_S_ENC_NITSP256_PRIVATE_KEY         := 'EDEBEADCAA9514CD4B30256126FB7DF958B911C6EB58CCF702983C3DCD3DECBD'O;

#LibItsPki_Pics.PICS_ITS_S_ENC_NISTP256_PUBLIC_KEY          := '023A4ADDCDD5EE66DAB2116B0C3AB47CCEDAE92CD9ACE98A84B10EB63A9DCA798C'O;

#LibItsPki_Pics.PICS_ITS_S_ENC_BRAINPOOLP256r1_PRIVATE_KEY  := '9F155D40B6C920BA45D8027093C8ADADAF3AA6F9F71F0CC0F8279FF0146A8A48'O;

#LibItsPki_Pics.PICS_ITS_S_ENC_BRAINPOOLP256r1_PUBLIC_KEY   := '038602F468BD334EA4D2BA416295E204D58BD1F42C85FB9BE57237C74544F6A69A'O;

#LibItsPki_Pics.PICS_ITS_S_SIGN_BRAINPOOLP256r1_PRIVATE_KEY := '6D585B716D06F75EC2B8A8ADEBFCE6ED35B0640C2AFBFF25FE48FC81A6732D4F'O;

#LibItsPki_Pics.PICS_ITS_S_SIGN_BRAINPOOLP256r1_PUBLIC_KEY  := '02A92BA3B770B040B8D958D5BD2CC9B537212D6963F50EA3E4784FEFA5D0454C12'O;

#LibItsPki_Pics.PICS_ITS_S_ENC_BRAINPOOLP384r1_PRIVATE_KEY  := '6B4B4392511B252C904801466F5DA0A7F28E038E6656800CBB0CDCB3D32F862CA4D59CBDC1A19E98E9191582AF1DB3D7'O;

#LibItsPki_Pics.PICS_ITS_S_SIGN_BRAINPOOLP384r1_PRIVATE_KEY := '3CD977195A579787C84D5900F4CB6341E0C3D2750B140C5380E6F03CE3FBA0022F7541DEABDCED4790D313ED8F56ACA8'O;

#LibItsPki_Pics.PICS_ITS_S_SIGN_BRAINPOOLP384r1_PUBLIC_KEY  := '0243FF5C96984C2C3F5FD5C5F6551C90F5FAEE1E5E8301763E4AF1E9D627F3474E554B82EE98EC4B49808DFF61B35F8313'O;



LibItsPki_Pics.PICS_ITS_S_CANONICAL_ID                := '455453492D5465737453797374656D2D3031'O # Nist-P256

#LibItsPki_Pics.PICS_ITS_S_CANONICAL_ID               := '455453492D5465737453797374656D2D3032'O # Brainpool-P256 r1

#LibItsPki_Pics.PICS_ITS_S_CANONICAL_ID               := '455453492D5465737453797374656D2D3033'O # Brainpool-P384 r1



LibItsPki_Pics.PICS_TS_EA_CERTIFICATE_ID              := "CERT_TS_A_EA"

LibItsPki_Pics.PICS_TS_AA_CERTIFICATE_ID              := "CERT_TS_A_AA"



# Set to true if the IUT support CertificateId shall be set to the choice name, false if it shall be omitted

#LibItsPki_Pics.PICS_EC_SUBJECT_ATTRIBUT_ID := false # requestedSubjectAttributes.id is omitted

# Set to true if the IUT support geographical region

#LibItsPki_Pics.PICS_EC_SUBJECT_ATTRIBUT_REGION := false # requestedSubjectAttributes.region is omitted



ItsPki_Pixits.PX_TRIGGER_EC_BEFORE_AT   := false;



ItsPki_Pixits.PX_CERT_EXPIRATION_DELAY  := 15.0



#LibItsPki_Pics.PICS_PKI_AUTH_POP       := false # Do not use Signed for PoP in Authorization requet

                                                 # Required for SECPKI_AA_AUTH_RCV_02_BV

#LibItsPki_Pics.PICS_SECPKI_REENROLMENT := false # Check in logs the pattern '==> EC ' to find the required information for re-enrolment

#LibItsPki_Pics.PICS_SECPKI_REENROLMENT := true # Check in logs the pattern '==> EC ' to find the required information for re-enrolment



#LibItsPki_Pixits.PX_INCLUDE_ENCRYPTION_KEYS := false # No encryption key in Authorization request
@@ -75,12 +95,6 @@ LibItsPki_Pics.PICS_ITS_S_SIGN_NISTP256_PUBLIC_KEY := '038038f5490cd5a58ff5465d3 
LibItsSecurity_Pics.PICS_SEC_CIRCULAR_REGION    := false

LibItsSecurity_Pics.PICS_SEC_RECTANGULAR_REGION := true



# BFK

LibItsSecurity_Pics.PICS_SEC_BFK_AUTH           := true

LibItsSecurity_Pics.PICS_SECPKI_ORIGINAL_BFK_KEY        := true

LibItsSecurity_Pics.PICS_SECPKI_UNIFIED_BFK_KEY         := false

LibItsSecurity_Pics.PICS_SECPKI_COMPACT_UNIFIED_BFK_KEY := false



[LOGGING]

# In this section you can specify the name of the log file and the classes of events

# you want to log into the file or display on console (standard error).