Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] SDK has outdated PAA's #26424

Closed
drempelg opened this issue May 8, 2023 · 0 comments · Fixed by #26914 or #26981
Closed

[BUG] SDK has outdated PAA's #26424

drempelg opened this issue May 8, 2023 · 0 comments · Fixed by #26914 or #26981
Assignees

Comments

@drempelg
Copy link
Contributor

drempelg commented May 8, 2023

Reproduction steps

The DCL has new versions of the PAA's than what is in the SDK. Chip-tool takes a path and doesn't reference the DCL so it would be helpful if the SDK did another mirror PR of the DCL.

Bug prevalence

everytime

GitHub hash of the SDK that was being used

8f66f42

Platform

core

Platform Version(s)

1.0, 1.1

Anything else?

No response

@emargolis emargolis self-assigned this May 28, 2023
tcarmelveilleux pushed a commit to tcarmelveilleux/connectedhomeip that referenced this issue May 31, 2023
- Fix NXP DER conversion --> not 100% legal format, but kept
  since only TC_DA_1_7.py library complains
- Updated all from local run.

Commands executed from root of SDK:

```
  pip install click_option_group # somehow missing from requirements
  cd credentials/development
  python ../fetch-paa-certs-from-dcl.py --use-test-net-http
  cd ../production
  python ../fetch-paa-certs-from-dcl.py --use-main-net-http
  git add credentials/
```

Fixes project-chip#26424
andy31415 pushed a commit that referenced this issue Jun 1, 2023
* Fix TC_DA_1_7.py PAA parser

- Fix TC_DA_1_7.py not to blow-up on bad PAAs, just log them.
- Fix PAA fetcher to do the same

Fixes #26979

* Update DCL mirror as of May 31, 2023

- Fix NXP DER conversion --> not 100% legal format, but kept
  since only TC_DA_1_7.py library complains
- Updated all from local run.

Commands executed from root of SDK:

```
  pip install click_option_group # somehow missing from requirements
  cd credentials/development
  python ../fetch-paa-certs-from-dcl.py --use-test-net-http
  cd ../production
  python ../fetch-paa-certs-from-dcl.py --use-main-net-http
  git add credentials/
```

Fixes #26424

* Restyled by autopep8

* Update DCL PAAs on May 31, 2023

Commands run from root. Includes temporary NXP fixups

```
cd credentials/development
rm dcld_mirror_*
python ../fetch-paa-certs-from-dcl.py --use-test-net-http
python ../fetch-paa-certs-from-dcl.py --use-main-net-http

openssl x509 -inform pem -in paa-root-certs/dcld_mirror_SERIALNUMBER_63709330400001_CN_NXP_Matter_PAA_O_NXP_Semiconductors_NV_C_NL.pem -outform der -out paa-root-certs/dcld_mirror_SERIALNUMBER_63709330400001_CN_NXP_Matter_PAA_O_NXP_Semiconductors_NV_C_NL.der
openssl x509 -inform pem -in paa-root-certs/dcld_mirror_SERIALNUMBER_63709380400001_CN_NXP_Matter_Test_PAA_O_NXP_Semiconductors_NV_C_NL.pem -outform der -out paa-root-certs/dcld_mirror_SERIALNUMBER_63709380400001_CN_NXP_Matter_Test_PAA_O_NXP_Semiconductors_NV_C_NL.der

cd ../production
rm dcld_mirror_*
python ../fetch-paa-certs-from-dcl.py --use-main-net-http
openssl x509 -inform pem -in paa-root-certs/dcld_mirror_SERIALNUMBER_63709330400001_CN_NXP_Matter_PAA_O_NXP_Semiconductors_NV_C_NL.pem -outform der -out paa-root-certs/dcld_mirror_SERIALNUMBER_63709330400001_CN_NXP_Matter_PAA_O_NXP_Semiconductors_NV_C_NL.der

cd ../..
git add credentials
```

* Add allowlist of skipped PAAs to TC_DA_1_7

* Fix formatting again

* Restyled by autopep8

---------

Co-authored-by: [email protected] <[email protected]>
Co-authored-by: Restyled.io <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants