Commit b86f443c authored by YannGarcia's avatar YannGarcia
Browse files

Update the README file

parent 5449f65a
Loading
Loading
Loading
Loading
+25 −17
Original line number Diff line number Diff line
@@ -29,7 +29,7 @@ https://forge.etsi.org/etsi-software-license
## STFs

The following STFs were or are currently involved in the evolutions of the ETSI ITS protocols project:
- STF 405, STF 422, STF 424, STF 455, STF 462, STF 481, STF 484, STF 507, STF 517, STF 525, STF 538, STF 545, TTF T002, TTF T011
- STF 405, STF 422, STF 424, STF 455, STF 462, STF 481, STF 484, STF 507, STF 517, STF 525, STF 538, STF 545, STF 594, TTF T002, TTF T011


## Installation
@@ -278,38 +278,46 @@ $ ../run_all.bash

## How to generate ITS test certificates

The Test System includes a tool, asn1certgen, to generate ITS test certificates used for Conformance Testing.
This tool is located in the folder '~/dev/TTF011_Its/tools/itscertgen/'.
The Test System requires the 'itscertgen' tool to generate ITS test certificates used for Conformance Testing.
This tool is located [here](https://forge.etsi.org/rep/ITS/itscertgen.git).

```sh
 cd ~/dev
$ git clone --recurse-submodules --single-branch https://forge.etsi.org/rep/ITS/itscertgen.git itscertgen
cd itscertgen
make
```

Note: These certificates can not be used in a true architectures, there are present only for testing and/or debug purposes.


### Build the tool 'asn1certgen' to generate new certificates bundle
### Build the tool 'itscertgen' to generate new certificates bundle

To build the tool, run the 'make':

To build the tool, run the 'make' command in each of the following folders:
- cshared
- cxml
- checker
- asn1certgen
```sh
$ cd ~/dev/itscertgen
$ make
```


### Generate the certificates

After applying the previous clause, change to the folder '~/dev/TTF011_Its/data/v3' and execute 'make' command:
After applying the previous clause, change to the folder '~/dev/TTF011_Its/data/certificates' and execute 'make' command:
```
$ cd ~/dev/TTF011_Its/data/v3
$ cd ~/dev/TTF011_Its/data/certificates
$ make
```
The certificates will be located in the folder '~/dev/TTF011_Its/data/v3/certificates'.
The certificates will be located in the folder '~/dev/TTF011_Its/data/certificates/certificates'.

To use this newly generated certificates, you shall update two parameters located in the TTCN-3 file LibItsSecurity_Pixits. These are:
- LibItsSecurity_Pixits.PX_CERTIFICATE_POOL_PATH, which is the path the certificates folder (e.g. LibItsSecurity_Pixits.PX_CERTIFICATE_POOL_PATH := "/home/<user>/tmp")
- LibItsSecurity_Pixits.PX_IUT_SEC_CONFIG_NAME, which is the name of the certificates folder (e.g. LibItsSecurity_Pixits.PX_IUT_SEC_CONFIG_NAME := "asn1c_cert")
- LibItsSecurity_Pixits.PX_CERTIFICATE_POOL_PATH, which is the path the certificates folder (e.g. LibItsSecurity_Pixits.PX_CERTIFICATE_POOL_PATH := "/home/<user>/dev/TTF011_Its/data/certificates")
- LibItsSecurity_Pixits.PX_IUT_SEC_CONFIG_NAME, which is the name of the certificates folder (e.g. LibItsSecurity_Pixits.PX_IUT_SEC_CONFIG_NAME := "certificates")


### Modify or create new certificates

The folder '~/dev/TTF011_Its/data/v3/profiles' contains an XML file for each certificate to be generated.
The folder '~/dev/TTF011_Its/data/profiles' contains an XML file for each certificate to be generated.
This XML file describes the certificate content (e.g. CERT_IUT_A_RCA.xml describes the root certificate for all CERT_IUT_A certificates).

By modifying these files, you can change create new certificate with different geographical area, different validity periods or different SSPs.
@@ -330,7 +338,7 @@ In this cases, the following parameters shall be modified to match the ITS devic
In addition, the Test System shall be configured to support the security modifying the following settings as described below:
- device_mode=1
- secured_mode=1
- sec_db_path=/home/<user>/dev/TTF011_Its/data/v3/certificates
- sec_db_path=/home/<user>/dev/TTF011_Its/data/certificates/certificates


### ITS Protocol Test suites for Transport layer
@@ -343,7 +351,7 @@ In this cases, the following parameters shall be modified to match the ITS devic
In addition, the Test System shall be configured to support the security modifying the following settings as described below:
- device_mode=1
- secured_mode=1
- sec_db_path=/home/<user>/dev/TTF011_Its/data/v3/certificates
- sec_db_path=/home/<user>/dev/TTF011_Its/data/certificates/certificates


### ITS Protocol Test suites for Security