Ashin Walpola
d107534eb2
obu-firmware builds against the vanetza-idf C-ITS library, which until now came from the colleague's microbu-esp32c5 tree beside the repository and was not tracked here, so a clone of this repository could not build the firmware it ships. The library alone is now part of obu-firmware, as obu-firmware/external/vanetza-idf: their external/vanetza-idf at commit cf4b99f, unchanged (9775 files; see its PROVENANCE.md). CMake takes it from there by default; -DVANETZA_IDF_DIR still points the build elsewhere. The rest of the colleague's tree (their own VAM firmware, PKI tooling, station-link Python tools, the V2X2MAP bridge) stays out of this repository and gitignored; nothing is pushed to their repository. NOTES.md, docs/06, TODO.md and the pcap verifier's usage line point at the new location.
59 lines
2.5 KiB
C++
59 lines
2.5 KiB
C++
#include <gtest/gtest.h>
|
|
#include <vanetza/security/v3/certificate.hpp>
|
|
#include <vanetza/security/v3/certificate_cache.hpp>
|
|
#include <vanetza/security/sha.hpp>
|
|
|
|
using namespace vanetza;
|
|
using namespace vanetza::security;
|
|
|
|
// implicit certificate (IEEE 1609.2 clause 6.4.5) with a dummy reconstruction value
|
|
inline v3::Certificate fake_implicit_certificate()
|
|
{
|
|
v3::Certificate cert;
|
|
cert->version = 3;
|
|
cert->type = Vanetza_Security_CertificateType_implicit;
|
|
cert->issuer.present = Vanetza_Security_IssuerIdentifier_PR_sha256AndDigest;
|
|
std::array<char, 8> issuer_digest = { 1, 2, 3, 4, 5, 6, 7, 8 };
|
|
OCTET_STRING_fromBuf(&cert->issuer.choice.sha256AndDigest, issuer_digest.data(), issuer_digest.size());
|
|
cert->toBeSigned.id.present = Vanetza_Security_CertificateId_PR_none;
|
|
std::array<char, 3> craca_id = { 0, 0, 0 };
|
|
OCTET_STRING_fromBuf(&cert->toBeSigned.cracaId, craca_id.data(), craca_id.size());
|
|
cert->toBeSigned.crlSeries = 0;
|
|
cert->toBeSigned.validityPeriod.start = 0;
|
|
cert->toBeSigned.validityPeriod.duration.present = Vanetza_Security_Duration_PR_minutes;
|
|
cert->toBeSigned.validityPeriod.duration.choice.minutes = 10080;
|
|
cert->toBeSigned.verifyKeyIndicator.present = Vanetza_Security_VerificationKeyIndicator_PR_reconstructionValue;
|
|
cert->toBeSigned.verifyKeyIndicator.choice.reconstructionValue.present = Vanetza_Security_EccP256CurvePoint_PR_compressed_y_0;
|
|
std::array<char, 32> dummy_point {};
|
|
OCTET_STRING_fromBuf(
|
|
&cert->toBeSigned.verifyKeyIndicator.choice.reconstructionValue.choice.compressed_y_0,
|
|
dummy_point.data(), dummy_point.size()
|
|
);
|
|
cert.add_app_permission(aid::CA, ByteBuffer({ 1, 0, 0 }));
|
|
return cert;
|
|
}
|
|
|
|
TEST(CertificateV3, cache)
|
|
{
|
|
v3::CertificateCache cache;
|
|
cache.store(v3::fake_certificate());
|
|
}
|
|
|
|
TEST(CertificateV3, implicit_certificate_digest)
|
|
{
|
|
v3::Certificate cert = fake_implicit_certificate();
|
|
ASSERT_TRUE(v3::is_canonical(*cert));
|
|
|
|
// curve of a reconstructed key is unknown without the issuer certificate
|
|
EXPECT_EQ(KeyType::Unspecified, cert.get_verification_key_type());
|
|
// ECQV public key reconstruction is not supported
|
|
EXPECT_FALSE(v3::get_public_key(*cert));
|
|
|
|
// IEEE 1609.2 clause 5.3.2: SHA-256 over the canonical encoding
|
|
const ByteBuffer encoded = cert.encode();
|
|
const HashedId8 expected = create_hashed_id8(calculate_sha256_digest(encoded.data(), encoded.size()));
|
|
auto digest = cert.calculate_digest();
|
|
ASSERT_TRUE(digest);
|
|
EXPECT_EQ(expected, *digest);
|
|
}
|