Ashin Walpola
0e9525162d
obu-firmware builds against vanetza-idf from microbu-esp32c5/external, but that tree was gitignored, so a clone of this repository could not build the firmware it ships. It is now committed here as ordinary files in its own folder, microbu-esp32c5/: the colleague's commit cf4b99f plus the V2X2MAP bridge's signature verification (--trust) used on the bench. Nothing is fetched from or pushed to the colleague's repository; this repository and its remotes carry everything. The folder's own .gitignore keeps build output, downloaded components and private key material out, as it did there; the committed file set is identical to that repository's tracked files. The ESP32-C5 is still flashed from obu-firmware/, which only takes vanetza-idf from microbu-esp32c5/, so the two stay separate folders. FLASHING.md says how to take a newer version of the colleague's tree (copy it over the folder, rebuild, test, commit).
100 lines
3.7 KiB
C++
100 lines
3.7 KiB
C++
#include <vanetza/common/its_aid.hpp>
|
|
#include <vanetza/common/position_provider.hpp>
|
|
#include <vanetza/security/sign_service.hpp>
|
|
#include <vanetza/security/v2/certificate.hpp>
|
|
#include <vanetza/security/v2/certificate_provider.hpp>
|
|
#include <vanetza/security/v2/sign_header_policy.hpp>
|
|
#include <list>
|
|
|
|
namespace vanetza
|
|
{
|
|
namespace security
|
|
{
|
|
namespace v2
|
|
{
|
|
|
|
DefaultSignHeaderPolicy::DefaultSignHeaderPolicy(const Runtime& rt, PositionProvider& positioning) :
|
|
m_runtime(rt), m_positioning(positioning), m_cam_next_certificate(m_runtime.now()), m_cert_requested(false), m_chain_requested(false)
|
|
{
|
|
}
|
|
|
|
std::list<HeaderField> DefaultSignHeaderPolicy::prepare_header(const SignRequest& request, CertificateProvider& certificate_provider)
|
|
{
|
|
std::list<HeaderField> header_fields;
|
|
|
|
header_fields.push_back(convert_time64(m_runtime.now()));
|
|
header_fields.push_back(IntX(request.its_aid));
|
|
|
|
if (request.its_aid == aid::CA) {
|
|
// section 7.1 in TS 103 097 v1.2.1
|
|
if (m_chain_requested) {
|
|
std::list<Certificate> full_chain;
|
|
full_chain.splice(full_chain.end(), certificate_provider.own_chain());
|
|
full_chain.push_back(certificate_provider.own_certificate());
|
|
header_fields.push_back(SignerInfo { std::move(full_chain) });
|
|
m_cam_next_certificate = m_runtime.now() + std::chrono::seconds(1);
|
|
} else if (m_runtime.now() < m_cam_next_certificate && !m_cert_requested) {
|
|
header_fields.push_back(SignerInfo { calculate_hash(certificate_provider.own_certificate()) });
|
|
} else {
|
|
header_fields.push_back(SignerInfo { certificate_provider.own_certificate() });
|
|
m_cam_next_certificate = m_runtime.now() + std::chrono::seconds(1);
|
|
}
|
|
|
|
if (m_unknown_certificates.size() > 0) {
|
|
std::list<HashedId3> unknown_certificates(m_unknown_certificates.begin(), m_unknown_certificates.end());
|
|
header_fields.push_back(unknown_certificates);
|
|
m_unknown_certificates.clear();
|
|
}
|
|
|
|
m_cert_requested = false;
|
|
m_chain_requested = false;
|
|
} else {
|
|
auto position = m_positioning.position_fix();
|
|
if (position.altitude) {
|
|
header_fields.push_back(ThreeDLocation(position.latitude, position.longitude, to_elevation(position.altitude->value())));
|
|
} else {
|
|
header_fields.push_back(ThreeDLocation(position.latitude, position.longitude));
|
|
}
|
|
header_fields.push_back(SignerInfo { certificate_provider.own_certificate() });
|
|
}
|
|
|
|
// ensure correct serialization order, see TS 103 097 v1.2.1
|
|
header_fields.sort([](const HeaderField& a, const HeaderField& b) {
|
|
const HeaderFieldType type_a = get_type(a);
|
|
const HeaderFieldType type_b = get_type(b);
|
|
|
|
// signer_info must be encoded first in all profiles
|
|
if (type_a == HeaderFieldType::Signer_Info) {
|
|
// return false if both are signer_info fields
|
|
return type_b != HeaderFieldType::Signer_Info;
|
|
} else if (type_b == HeaderFieldType::Signer_Info) {
|
|
return false; // "signer info" @ b has precedence over "non-signer info" @ a
|
|
}
|
|
|
|
// all other fields must be encoded in ascending order
|
|
using enum_int = std::underlying_type<HeaderFieldType>::type;
|
|
return static_cast<enum_int>(type_a) < static_cast<enum_int>(type_b);
|
|
});
|
|
|
|
return header_fields;
|
|
}
|
|
|
|
void DefaultSignHeaderPolicy::request_unrecognized_certificate(HashedId8 id)
|
|
{
|
|
m_unknown_certificates.insert(truncate(id));
|
|
}
|
|
|
|
void DefaultSignHeaderPolicy::request_certificate()
|
|
{
|
|
m_cert_requested = true;
|
|
}
|
|
|
|
void DefaultSignHeaderPolicy::request_certificate_chain()
|
|
{
|
|
m_chain_requested = true;
|
|
}
|
|
|
|
} // namespace v2
|
|
} // namespace security
|
|
} // namespace vanetza
|