MicrOBU/microbu-esp32c5/external/vanetza-idf/docs/idf/evidence/security-host-05/test.cfg

// AtsSecurity, receiving side of the IUT (TS 103 097 V2.2.1 clauses 5.2, 7.1.1, 7.1.2):
// the test system signs CAMs/DENMs in TTCN-3 with CERT_TS_A_AT (or PX_AT_CERTIFICATE)
// from the pool and sends them through the GeoNetworking port; the adapter injects
// them into the SUT (vidf_sut --security-pool, built with VIDF_SECURITY_VERIFY) as
// AL_DATA.indication and reports what the SUT passes up after SN-DECAP as
// UtGnEventInd. The SUT trusts CERT_IUT_A_RCA with CERT_IUT_A_AA and CERT_TS_A_AA.
// Cases gated by PICS this SUT does not claim (implicit certificates, Brainpool)
// are not selected. No CAM carrier: nothing is stimulated on the sending side.
[MODULE_PARAMETERS]
// AtsSecurity, sending side of the IUT, GN-MGMT profile (TS 103 097 clause 7.1.3):
// the SUT (vidf_sut --security-pool) signs its own beacons through the GN core. No
// facilities traffic is stimulated because an SHB restarts the beacon timer
// (TS 103 836-4-1 clause 10.3.5) and the CAM/DENM profile cases live in
// etsi_security_facilities.cfg. The test system verifies every transmission with
// the pool it loads from ./certificates (run_etsi.py --pool copies the generated
// pool there). Every PICS that would select receiving-side or unimplemented
// behaviour is disabled.
LibItsGeoNetworking_Pics.PICS_GN_LOCAL_GN_ADDR := {
    typeOfAddress := e_initial,
    stationType := e_unknown,
    reserved := 0,
    mid := '020000000001'O
}
LibItsGeoNetworking_Pics.PICS_GN_SECURITY := true
LibItsGeoNetworking_Pics.PICS_IS_IUT_SECURED := true
LibItsGeoNetworking_Pics.PICS_GN_BEACON_SRC := true
LibItsGeoNetworking_Pics.PICS_GN_BEACON_DST := false
LibItsGeoNetworking_Pics.PICS_GN_GUC := false
LibItsGeoNetworking_Pics.PICS_GN_GBC := false
LibItsGeoNetworking_Pics.PICS_GN_GAC := false
LibItsGeoNetworking_Pics.PICS_GN_TSB := false
LibItsGeoNetworking_Pics.PICS_GN_DAD := false
LibItsGeoNetworking_Pics.PICS_GN_SHB_DST := false
LibItsCommon_Pixits.PX_GNSS_SCENARIO_SUPPORT := false
// CAM and DENM payloads are carried over BTP-B (TS 103 836-5-1 clause 7.2).
LibItsGeoNetworking_Pixits.PX_GN_UPPER_LAYER := e_btpB
LibItsSecurity_Pixits.PX_CERTIFICATE_POOL_PATH := "."
LibItsSecurity_Pixits.PX_IUT_SEC_CONFIG_NAME := "certificates"
LibItsSecurity_Pixits.PX_IUT_DEFAULT_CERTIFICATE := "CERT_IUT_A_AT"
// CERT_TS_B_AT: signing ticket with a circular region around the SUT position (DENM_02_BV_XX, CAM_04_BV_XX)
LibItsSecurity_Pixits.PX_AT_CERTIFICATE := "CERT_TS_B_AT"
LibItsCommon_Pixits.PX_CERT_FOR_TS := "CERT_TS_A_AT"
LibItsSecurity_Pixits.PX_OTHER_ITS_AID := 141
LibItsSecurity_Pics.PICS_SEC_ITS_AID_OTHER := true
LibItsSecurity_Pics.PICS_SEC_SHA256 := true
LibItsSecurity_Pics.PICS_SEC_SHA384 := false
LibItsSecurity_Pics.PICS_SEC_NIST_P256 := true
LibItsSecurity_Pics.PICS_SEC_BRAINPOOL_P256R1 := false
LibItsSecurity_Pics.PICS_SEC_BRAINPOOL_P384R1 := false
// Receiving side and P2P distribution need SN-DECAP verification (GAP-SEC-001).
LibItsSecurity_Pics.PICS_SEC_P2P_AT_DISTRIBUTION := false
LibItsSecurity_Pics.PICS_SEC_P2P_AA_DISTRIBUTION := false
LibItsSecurity_Pics.PICS_SEC_CERTIFICATE_SELECTION := false
LibItsSecurity_Pics.PICS_SEC_CIRCULAR_REGION := false
LibItsSecurity_Pics.PICS_SEC_RECTANGULAR_REGION := false
LibItsSecurity_Pics.PICS_SEC_POLYGONAL_REGION := false
LibItsSecurity_Pics.PICS_SEC_IDENTIFIED_REGION := false
LibItsSecurity_Pics.PICS_SEC_BFK_AUTH := false

[TESTPORT_PARAMETERS]
// Official GN layer syntax; only the security keys are read by the adapter. Verification
// failures discard the IUT transmission (enable_security_checks=1) instead of passing it
// up with a warning, so a PASS below implies a signature the framework verified against
// the pool it loaded from ./certificates.
system.geoNetworkingPort.params := "GN(enable_security_checks=1,sec_db_path=./certificates)"
// No CAM carrier: the IUT is requested to send secured beacons only.
system.utPort.params := "cam_carrier_ms=0"

[LOGGING]
LogFile := "%e.%h-%r.%s"
FileMask := LOG_ALL
ConsoleMask := VERDICTOP | ERROR | WARNING | EXECUTOR

[EXECUTE]
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_MSG_01_BV
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_MSG_01_BO
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_MSG_02_BO
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_CAM_01_BV
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_CAM_02_BV
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_CAM_03_BV
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_CAM_04_BV_XX
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_CAM_01_BO
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_CAM_02_BO
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_CAM_03_BO
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_CAM_04_BO
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_CAM_05_BO
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_CAM_06_BO
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_CAM_07_BO
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_CAM_08_BO
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_CAM_09_BO
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_DENM_01_BV
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_DENM_02_BV_XX
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_DENM_01_BO
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_DENM_02_BO
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_DENM_03_BO
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_DENM_04_BO
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_DENM_05_BO
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_DENM_06_BO
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_DENM_07_BO
ItsSecurity_TestCases.TC_SEC_ITSS_RCV_DENM_09_BO