Commit d03aa280 authored by garciay's avatar garciay
Browse files

STF538: Start validation

parent a6ac0912

ttcn/Security/LibItsSecurity_Functions.ttcn

+13 −4
Original line number Diff line number Diff line
@@ -1538,9 +1538,18 @@ module LibItsSecurity_Functions { 
                if (fx_loadCertificates(PX_CERTIFICATE_POOL_PATH, p_configId) == true) {

                  // Setup security component variables

                  if (f_readCertificate(cc_taCert_A, vc_atCertificate) == true) {

                    var charstring str := oct2str(unichar2oct(vc_atCertificate.toBeSigned.id.name));

                    log("UTF8 to charstring conversion: ", str);

                    if (f_readCertificate(str, vc_aaCertificate)) {

                    var HashedId8 v_issuer;

                    log("Issuer: ", vc_atCertificate.issuer);

                    if (ischosen(vc_atCertificate.issuer.sha256AndDigest)) {

                      v_issuer := vc_atCertificate.issuer.sha256AndDigest;

                    } else if (ischosen(vc_atCertificate.issuer.sha384AndDigest)) {

                      v_issuer := vc_atCertificate.issuer.sha384AndDigest;

                    } else {

                      log("AT certificate cannot be issued by CA");

                      return false;

                    }

                    log("Selected issuer: ", v_issuer);

                    if (f_getCertificateFromDigest(v_issuer, vc_aaCertificate)) {

                      if (f_readSigningKey(cc_taCert_A, vc_signingPrivateKey) == true) {

                        f_readEncryptingKey(cc_taCert_A, vc_encryptPrivateKey);

                        return true;