Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Device Attestation (Modular) #11

Open
wants to merge 41 commits into
base: master
Choose a base branch
from

Conversation

mleisner
Copy link
Owner

@mleisner mleisner commented Sep 9, 2021

Problem

Working device attestation

Change overview

  • Added CertChainRequest and AttestationRequest commands to lighting-app ZAP script
  • Introduced CertChainRequest, CertChainResponse, AttestationRequest and AttestationResponse commands into operational-credentials-cluster.xml
  • Added the above commands' callbacks to operational-credentials-server.cpp
  • Introduced the Attestation Nonce buffer to CHIPDevice Class
  • Added Certificate Chain Request and Attestation Request Commands to CHIPDeviceController
  • Added global method to Server.cpp in order to retrieve Server's SecureSessionMgr (needed to retrieve Attestation Challenge)
  • Added support to DAC/PAI certificates in CHIPDevic

(includes two files
src/credentials/DeviceAttestationConstructor.cpp
src/credentials/DeviceAttestationConstructor.h
that was in PR project-chip#9544)

Testing

Tested Commissioning using chip-tool and lighting apps

Marty Leisner added 2 commits September 8, 2021 20:35
helpers

Moved CopySpantoMutableSpan into src/lib/support/Span.h as a general use
routine.

Added ExtractVIDFromX509Cert and ExtractAKIDFromX509Cert

Changed attestation data to equate with updated spec.

coauthor: restyled io
…p ZAP script

Introduced CertChainRequest, CertChainResponse, AttestationRequest and AttestationResponse commands into operational-credentials-cluster.xml

Added the above commands' callbacks to operational-credentials-server.cpp

Introduced the Attestation Nonce buffer to CHIPDevice Class

Added Certificate Chain Request and Attestation Request Commands to CHIPDeviceController

Added global method to Server.cpp in order to retrieve Server's SecureSessionMgr (needed to retrieve Attestation Challenge)

Added support to DAC/PAI certificates in CHIPDevice

Include files from the DA constructor PR
        src/credentials/DeviceAttestationConstructor.cpp
        src/credentials/DeviceAttestationConstructor.h
@mleisner mleisner force-pushed the feature/device_attestation_complete branch from 4ac999d to d5e476f Compare September 9, 2021 02:45
Marty Leisner added 5 commits September 10, 2021 00:59
Changing naming convention for constants

simpler logic for context tags.

Eliminate boolean array indexed by tag and have boolean flags.

Removed vector for VendorReserved data and changed signature of helper
functions.
include generated zap files.

coauthor -- clang format
@mleisner mleisner force-pushed the feature/device_attestation_complete branch from 0e9dcf8 to adb5725 Compare September 11, 2021 00:38
Marty Leisner added 12 commits September 13, 2021 22:07
use TLV::ContiguousBufferTLVReader
have consecutive context tags
add TODOs for future work
improve documentations on usage in headers
Have seperate tests for deconstruction with/without firmware info.
clang-format did a number of reformats

Updated firmwareInfoTestVector
Set Device AttestationVerifier Example during DeviceCommissioner Initialization.
rename sendOperationalCertsImmediately flag to sendCertificateChainImmediately.
Added nonce parameter to SendAttestationRequestCommand method.
Added method to handle Attestation Information Validation result.
Added state of Device Attestation to Commissioner State Machine.
Moved CertificateType enum to DeviceAttestationVerifier module.
Added missing comments on newly introduced methods.
rename keyid to sessionid.
@mleisner mleisner force-pushed the feature/device_attestation_complete branch 2 times, most recently from 37e6c24 to 0655e3f Compare September 20, 2021 20:13
Marty Leisner added 2 commits September 20, 2021 17:14
…-comcast:mleisner/connectedhomeip into feature/complete-redux
changed error code to be more conforming

Added TODO comments in constructor PR project-chip#9544
@mleisner mleisner force-pushed the feature/device_attestation_complete branch from 0655e3f to b3e4d24 Compare September 20, 2021 23:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant