Commit 3a64c8b5 authored by Denis Filatov's avatar Denis Filatov
Browse files

enrollment checks without full message verification

parent 5eb803aa
Loading
Loading
Loading
Loading
+4 −0
Original line number Diff line number Diff line
@@ -12,4 +12,8 @@ module ItsPki_Pixits {
  
  modulepar boolean PX_TRIGGER_EC_BEFORE_AT := true;
  
  modulepar boolean PX_CHECK_INITIAL_STATES := true;
  
  modulepar float PX_CERT_EXPIRATION_DELAY := 10.0;
  
} // End of module ItsPki_Pixits
+1185 −341

File changed.

Preview size limit exceeded, changes collapsed.

+1 −1
Original line number Diff line number Diff line
@@ -11,7 +11,7 @@ module LibItsPki_EncdecDeclarations {
  import from EtsiTs103097Module language "ASN.1:1997" all;
  import from EtsiTs102941TrustLists language "ASN.1:1997" all;

  // LibItsSecurity
  // LibItsPki
  import from LibItsSecurity_TypesAndValues all;

  external function fx_enc_EtsiTs102941Data(in EtsiTs102941MessagesCa.EtsiTs102941Data p_etsi_ts_102941_data) return bitstring
+10 −0
Original line number Diff line number Diff line
@@ -60,11 +60,21 @@ module LibItsPki_Pics {
   */
  modulepar boolean PICS_PKI_AUTH_POP := true;

  /**
   * @desc Do the Authorization Request use SignedWithPop mechanism?
   */
  modulepar boolean PICS_UT_STATE_INDICATION := true;

  /**
   * @desc Certificate used by the IUT acting as ITS-S
   */
  modulepar charstring PICS_IUT_CERTIFICATE_ID := "CERT_IUT_A_AT";

  /**
   * @desc Default enrollment credentials used by ITS-S
   */
  modulepar charstring PICS_IUT_EC_CERTIFICATE_ID := "CERT_IUT_A_EC";

  /**
   * @desc Certificate used by the IUT acting as EA
   */
+61 −4
Original line number Diff line number Diff line
@@ -527,7 +527,7 @@ module LibItsPki_Templates {
  } // End of template mw_publicKeys

  template (omit) CertificateSubjectAttributes m_certificateSubjectAttributes_id_none(
                                                                                      in template (value) SequenceOfPsidSsp p_appPermissions,
                                                                                      in template (omit) SequenceOfPsidSsp p_appPermissions := omit,
                                                                                      in template (omit) ValidityPeriod p_validityPeriod := omit,
                                                                                      in template (omit) GeographicRegion p_region := omit,
                                                                                      in template (omit) SubjectAssurance p_assuranceLevel := omit
@@ -541,7 +541,7 @@ module LibItsPki_Templates {
  } // End of template m_certificateSubjectAttributes_id_none

  template (omit) CertificateSubjectAttributes m_certificateSubjectAttributes_id_omit(
                                                                                      in template (value) SequenceOfPsidSsp p_appPermissions,
                                                                                      in template (omit) SequenceOfPsidSsp p_appPermissions := omit,
                                                                                      in template (omit) ValidityPeriod p_validityPeriod := omit,
                                                                                      in template (omit) GeographicRegion p_region := omit,
                                                                                      in template (omit) SubjectAssurance p_assuranceLevel := omit
@@ -752,7 +752,7 @@ module LibItsPki_Templates {
  template CertificateSubjectAttributes mw_certificate_subject_attributes(
                                                                          template (present) SequenceOfPsidSsp p_appPermissions := ?,
                                                                          template CertificateId p_id := *,
                                                                          template (present) ValidityPeriod p_validityPeriod := ?,
                                                                          template ValidityPeriod p_validityPeriod := *,
                                                                          template SubjectAssurance p_assuranceLevel := *,
                                                                          template GeographicRegion p_region := *,
                                                                          template SequenceOfPsidGroupPermissions p_certIssuePermissions := omit
@@ -768,7 +768,7 @@ module LibItsPki_Templates {
  template CertificateSubjectAttributes mw_certificate_subject_attributes_optional_assuranceLevel(
                                                                                                  template (present) SequenceOfPsidSsp p_appPermissions := ?,
                                                                                                  template (present) CertificateId p_id := ?,
                                                                                                  template (present) ValidityPeriod p_validityPeriod := ?,
                                                                                                  template ValidityPeriod p_validityPeriod := *,
                                                                                                  template SubjectAssurance p_assuranceLevel := *,
                                                                                                  template GeographicRegion p_region := *,
                                                                                                  template SequenceOfPsidGroupPermissions p_certIssuePermissions := omit
@@ -1323,4 +1323,61 @@ module LibItsPki_Templates {
    cert := p_cert
  } // End of template mw_dc_entry

  group security_templates {
    template (omit) HeaderInfo m_headerInfo_inner_pki_request(
                                                              in template (value) Psid p_psid := c_its_aid_SCR,
                                                              in template (value) Time64 p_generationTime
                                                              ) modifies m_ieee1609Dot2_headerInfo := {
        generationTime       := p_generationTime
    };
    
    template (omit) HeaderInfo m_headerInfo_inner_pki_response(
                                                                in template (value) Psid p_psid := c_its_aid_SCR,
                                                                in template (value) Time64 p_generationTime
                                                                ) modifies m_ieee1609Dot2_headerInfo := {
        generationTime       := p_generationTime
    };
    
    template (omit) HeaderInfo m_headerInfo_inner_pki_ctl_response(
                                                                    in template (value) Psid p_psid := c_its_aid_CPOC,
                                                                    in template (value) Time64 p_generationTime
                                                                    ) modifies m_ieee1609Dot2_headerInfo := {
        generationTime       := p_generationTime
    };

    template (omit) HeaderInfo m_headerInfo_inner_pki_crl_response(
                                                                    in template (value) Psid p_psid := c_its_aid_CRL,
                                                                    in template (value) Time64 p_generationTime
                                                                    ) modifies m_ieee1609Dot2_headerInfo := {
        generationTime       := p_generationTime
    };

    template (present) HeaderInfo mw_headerInfo_inner_pki_request(
                                                                  template (present) Psid p_psid := c_its_aid_SCR,
                                                                  template (present) Time64 p_generationTime := ?
                                                                  ) modifies mw_ieee1609Dot2_headerInfo := {
            generationTime       := p_generationTime,
            expiryTime           := omit,
            generationLocation   := omit
    };
    
    template (present) HeaderInfo mw_headerInfo_outer_pki_request(
                                                                  template (present) Psid p_psid := c_its_aid_SCR,
                                                                  template (present) Time64 p_generationTime := ?
                                                                  ) modifies mw_ieee1609Dot2_headerInfo := {
            generationTime       := p_generationTime,
            expiryTime           := omit,
            generationLocation   := omit
    };
    
    template HeaderInfo mw_headerInfo_inner_pki_response(
                                                          template (present) Psid p_psid := c_its_aid_SCR,
                                                          template Time64 p_generationTime := *
                                                          ) modifies mw_ieee1609Dot2_headerInfo := {
      generationTime       := p_generationTime,
      expiryTime           := omit,
      generationLocation   := omit
    }
  }

} // End of module LibItsPki_Templates
Loading