Ashin Walpola
0e9525162d
obu-firmware builds against vanetza-idf from microbu-esp32c5/external, but that tree was gitignored, so a clone of this repository could not build the firmware it ships. It is now committed here as ordinary files in its own folder, microbu-esp32c5/: the colleague's commit cf4b99f plus the V2X2MAP bridge's signature verification (--trust) used on the bench. Nothing is fetched from or pushed to the colleague's repository; this repository and its remotes carry everything. The folder's own .gitignore keeps build output, downloaded components and private key material out, as it did there; the committed file set is identical to that repository's tracked files. The ESP32-C5 is still flashed from obu-firmware/, which only takes vanetza-idf from microbu-esp32c5/, so the two stay separate folders. FLASHING.md says how to take a newer version of the colleague's tree (copy it over the folder, rebuild, test, commit).
59 lines
2.5 KiB
C++
59 lines
2.5 KiB
C++
#include <gtest/gtest.h>
|
|
#include <vanetza/security/v3/certificate.hpp>
|
|
#include <vanetza/security/v3/certificate_cache.hpp>
|
|
#include <vanetza/security/sha.hpp>
|
|
|
|
using namespace vanetza;
|
|
using namespace vanetza::security;
|
|
|
|
// implicit certificate (IEEE 1609.2 clause 6.4.5) with a dummy reconstruction value
|
|
inline v3::Certificate fake_implicit_certificate()
|
|
{
|
|
v3::Certificate cert;
|
|
cert->version = 3;
|
|
cert->type = Vanetza_Security_CertificateType_implicit;
|
|
cert->issuer.present = Vanetza_Security_IssuerIdentifier_PR_sha256AndDigest;
|
|
std::array<char, 8> issuer_digest = { 1, 2, 3, 4, 5, 6, 7, 8 };
|
|
OCTET_STRING_fromBuf(&cert->issuer.choice.sha256AndDigest, issuer_digest.data(), issuer_digest.size());
|
|
cert->toBeSigned.id.present = Vanetza_Security_CertificateId_PR_none;
|
|
std::array<char, 3> craca_id = { 0, 0, 0 };
|
|
OCTET_STRING_fromBuf(&cert->toBeSigned.cracaId, craca_id.data(), craca_id.size());
|
|
cert->toBeSigned.crlSeries = 0;
|
|
cert->toBeSigned.validityPeriod.start = 0;
|
|
cert->toBeSigned.validityPeriod.duration.present = Vanetza_Security_Duration_PR_minutes;
|
|
cert->toBeSigned.validityPeriod.duration.choice.minutes = 10080;
|
|
cert->toBeSigned.verifyKeyIndicator.present = Vanetza_Security_VerificationKeyIndicator_PR_reconstructionValue;
|
|
cert->toBeSigned.verifyKeyIndicator.choice.reconstructionValue.present = Vanetza_Security_EccP256CurvePoint_PR_compressed_y_0;
|
|
std::array<char, 32> dummy_point {};
|
|
OCTET_STRING_fromBuf(
|
|
&cert->toBeSigned.verifyKeyIndicator.choice.reconstructionValue.choice.compressed_y_0,
|
|
dummy_point.data(), dummy_point.size()
|
|
);
|
|
cert.add_app_permission(aid::CA, ByteBuffer({ 1, 0, 0 }));
|
|
return cert;
|
|
}
|
|
|
|
TEST(CertificateV3, cache)
|
|
{
|
|
v3::CertificateCache cache;
|
|
cache.store(v3::fake_certificate());
|
|
}
|
|
|
|
TEST(CertificateV3, implicit_certificate_digest)
|
|
{
|
|
v3::Certificate cert = fake_implicit_certificate();
|
|
ASSERT_TRUE(v3::is_canonical(*cert));
|
|
|
|
// curve of a reconstructed key is unknown without the issuer certificate
|
|
EXPECT_EQ(KeyType::Unspecified, cert.get_verification_key_type());
|
|
// ECQV public key reconstruction is not supported
|
|
EXPECT_FALSE(v3::get_public_key(*cert));
|
|
|
|
// IEEE 1609.2 clause 5.3.2: SHA-256 over the canonical encoding
|
|
const ByteBuffer encoded = cert.encode();
|
|
const HashedId8 expected = create_hashed_id8(calculate_sha256_digest(encoded.data(), encoded.size()));
|
|
auto digest = cert.calculate_digest();
|
|
ASSERT_TRUE(digest);
|
|
EXPECT_EQ(expected, *digest);
|
|
}
|