Note: These certificates can not be used in a true architectures, there are present only for testing and/or debug purposes.
### Build the tool 'asn1certgen' to generate new certificates bundle
### Build the tool 'itscertgen' to generate new certificates bundle
To build the tool, run the 'make':
To build the tool, run the 'make' command in each of the following folders:
- cshared
- cxml
- checker
- asn1certgen
```sh
$ cd ~/dev/itscertgen
$ make
```
### Generate the certificates
After applying the previous clause, change to the folder '~/dev/TTF011_Its/data/v3' and execute 'make' command:
After applying the previous clause, change to the folder '~/dev/TTF011_Its/data/certificates' and execute 'make' command:
```
$ cd ~/dev/TTF011_Its/data/v3
$ cd ~/dev/TTF011_Its/data/certificates
$ make
```
The certificates will be located in the folder '~/dev/TTF011_Its/data/v3/certificates'.
The certificates will be located in the folder '~/dev/TTF011_Its/data/certificates/certificates'.
To use this newly generated certificates, you shall update two parameters located in the TTCN-3 file LibItsSecurity_Pixits. These are:
- LibItsSecurity_Pixits.PX_CERTIFICATE_POOL_PATH, which is the path the certificates folder (e.g. LibItsSecurity_Pixits.PX_CERTIFICATE_POOL_PATH := "/home/<user>/tmp")
- LibItsSecurity_Pixits.PX_IUT_SEC_CONFIG_NAME, which is the name of the certificates folder (e.g. LibItsSecurity_Pixits.PX_IUT_SEC_CONFIG_NAME := "asn1c_cert")
- LibItsSecurity_Pixits.PX_CERTIFICATE_POOL_PATH, which is the path the certificates folder (e.g. LibItsSecurity_Pixits.PX_CERTIFICATE_POOL_PATH := "/home/<user>/dev/TTF011_Its/data/certificates")
- LibItsSecurity_Pixits.PX_IUT_SEC_CONFIG_NAME, which is the name of the certificates folder (e.g. LibItsSecurity_Pixits.PX_IUT_SEC_CONFIG_NAME := "certificates")
### Modify or create new certificates
The folder '~/dev/TTF011_Its/data/v3/profiles' contains an XML file for each certificate to be generated.
The folder '~/dev/TTF011_Its/data/profiles' contains an XML file for each certificate to be generated.
This XML file describes the certificate content (e.g. CERT_IUT_A_RCA.xml describes the root certificate for all CERT_IUT_A certificates).
By modifying these files, you can change create new certificate with different geographical area, different validity periods or different SSPs.
@@ -330,7 +338,7 @@ In this cases, the following parameters shall be modified to match the ITS devic
In addition, the Test System shall be configured to support the security modifying the following settings as described below: