Commit 467ea0b7 authored by Yann Garcia's avatar Yann Garcia
Browse files

Validate Authorization/AuthorizationValidation

parent b1729a03
Loading
Loading
Loading
Loading
+211 −72

File changed.

Preview size limit exceeded, changes collapsed.

+27 −3
Original line number Diff line number Diff line
@@ -1259,7 +1259,7 @@ module LibItsSecurity_Templates {
    group issuerIdentifier {
        
        template (value) IssuerIdentifier m_issuerIdentifier_self(
                                                                  in template (value) HashAlgorithm p_self
                                                                  in template (value) HashAlgorithm p_self := sha256
        ) := {
            self_  := p_self
        } // End of template m_issuerIdentifier_self
@@ -1409,6 +1409,29 @@ module LibItsSecurity_Templates {
            verifyKeyIndicator     := p_verifyKeyIndicator
        } // End of template mw_toBeSignedCertificate_ea
        
        template (omit) ToBeSignedCertificate m_toBeSignedCertificate_ec(
                                                                         in template (value) CertificateId p_id,
                                                                         in template (value) SequenceOfPsidSsp p_appPermissions,
                                                                         in template (value) VerificationKeyIndicator p_verifyKeyIndicator,
                                                                         in template (value) ValidityPeriod p_validityPeriod,
                                                                         in template (omit) GeographicRegion p_region := omit,
                                                                         in template (omit) SubjectAssurance p_assuranceLevel := omit,
                                                                         in template (omit) PublicEncryptionKey p_encryptionKey := omit
        ) := {
            id                     := p_id,
            cracaId                := '000000'O, // ETSI TS 103 097 V1.3.1 Clause 6 Bullet 2
            crlSeries              := 0, // ETSI TS 103 097 V1.3.1 Clause 6 Bullet 3
            validityPeriod         := p_validityPeriod,
            region                 := p_region,
            assuranceLevel         := p_assuranceLevel,
            appPermissions         := p_appPermissions,
            certIssuePermissions   := omit,
            certRequestPermissions := omit, 
            canRequestRollover     := omit,
            encryptionKey          := p_encryptionKey,
            verifyKeyIndicator     := p_verifyKeyIndicator
        } // End of template m_toBeSignedCertificate_ec
        
        /**
         * @desc Send template for ToBeSignedCertificate with Enrolment credential restrictions
         * @see ETSI TS 103 097 V1.3.1 Clause 7.2.2 Enrolment credential
@@ -1419,7 +1442,8 @@ module LibItsSecurity_Templates {
                                                                   template (present) VerificationKeyIndicator p_verifyKeyIndicator := ?,
                                                                   template (present) ValidityPeriod p_validityPeriod := ?,
                                                                   template GeographicRegion p_region := *,
                                                                   template SubjectAssurance p_assuranceLevel := *
                                                                   template SubjectAssurance p_assuranceLevel := *,
                                                                   template PublicEncryptionKey p_encryptionKey := *
        ) := { 
            id                     := p_id,
            cracaId                := '000000'O, // ETSI TS 103 097 V1.3.1 Clause 6 Bullet 2
@@ -1431,7 +1455,7 @@ module LibItsSecurity_Templates {
            certIssuePermissions   := omit,
            certRequestPermissions := omit, 
            canRequestRollover     := omit,
            encryptionKey          := omit,
            encryptionKey          := p_encryptionKey,
            verifyKeyIndicator     := p_verifyKeyIndicator
        } // End of template mw_toBeSignedCertificate_ec