Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

da_revocation: sample revoked DACs and PAI certs for VID:0xFFF1 PID:0x8001 #36838

Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

da_revocation: sample revoked DACs and PAI certs for VID:0xFFF1 PID:0x8001 #36838

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
f596064
credentials: sample revoked PAI certificate, key, and CRL for VID 0xFFF1
shubhamdp Dec 13, 2024
c24a766
credentials: sample revoked DAC certificates, keys, and CRL for VID
shubhamdp Dec 13, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file added credentials/development/attestation/Matter-Development-DAC-FFF1-8001-Revoked-01-Cert.der
View file
Open in desktop
Binary file not shown.
13 changes: 13 additions & 0 deletions credentials/development/attestation/Matter-Development-DAC-FFF1-8001-Revoked-01-Cert.pem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
-----BEGIN CERTIFICATE-----
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please wait for a review by @bh3000 befire merging.
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-----END CERTIFICATE-----
Binary file added credentials/development/attestation/Matter-Development-DAC-FFF1-8001-Revoked-01-Key.der
View file
Open in desktop
Binary file not shown.
5 changes: 5 additions & 0 deletions credentials/development/attestation/Matter-Development-DAC-FFF1-8001-Revoked-01-Key.pem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
-----BEGIN EC PRIVATE KEY-----
MHcCAQEEICRu6mYqRMtt6T7/1hTpbTcV3oz7bU6XVkTuXmbst5x5oAoGCCqGSM49
AwEHoUQDQgAEKj1zcPIgm7E5tCym2V2/L3AYiLRxjjLGOucTJxReBRh4aLUo8amd
JG8UcLDM2FXulDg1Ju4JDeC7L94Dj+4+Cw==
-----END EC PRIVATE KEY-----
Binary file added credentials/development/attestation/Matter-Development-DAC-FFF1-8001-Revoked-02-Cert.der
View file
Open in desktop
Binary file not shown.
13 changes: 13 additions & 0 deletions credentials/development/attestation/Matter-Development-DAC-FFF1-8001-Revoked-02-Cert.pem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Binary file added credentials/development/attestation/Matter-Development-DAC-FFF1-8001-Revoked-02-Key.der
View file
Open in desktop
Binary file not shown.
5 changes: 5 additions & 0 deletions credentials/development/attestation/Matter-Development-DAC-FFF1-8001-Revoked-02-Key.pem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
-----BEGIN EC PRIVATE KEY-----
MHcCAQEEICL40ZprUkEw7MrV0YfOjrfqnX/9WGi04MqRvCtshDmcoAoGCCqGSM49
AwEHoUQDQgAE2XE8SKWVJ+k+ej5Uno+w4Agp1KAsjO3yjf10ZysAGYx+5D8146zh
0atJezLd5M3WqEdhYhkclRSu978RX7bEcg==
-----END EC PRIVATE KEY-----
Binary file added credentials/development/attestation/Matter-Development-DAC-FFF1-8001-Revoked-03-Cert.der
View file
Open in desktop
Binary file not shown.
13 changes: 13 additions & 0 deletions credentials/development/attestation/Matter-Development-DAC-FFF1-8001-Revoked-03-Cert.pem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Binary file added credentials/development/attestation/Matter-Development-DAC-FFF1-8001-Revoked-03-Key.der
View file
Open in desktop
Binary file not shown.
5 changes: 5 additions & 0 deletions credentials/development/attestation/Matter-Development-DAC-FFF1-8001-Revoked-03-Key.pem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
-----BEGIN EC PRIVATE KEY-----
MHcCAQEEIJjC2LN18deS5XLHAbR0Dn+4Gp6cyTaqKg+HbOja5VeMoAoGCCqGSM49
AwEHoUQDQgAEIuVzZemJkP91BuEevsM/+DSjmZny2dY171hH6+BY2H0b++Hl4kEb
ttwR8/J+hCzAzKvgKk8mnVD1ygcqJjXbBA==
-----END EC PRIVATE KEY-----
Binary file added credentials/development/attestation/Matter-Development-PAI-FFF1-noPID-CRL.der
View file
Open in desktop
Binary file not shown.
9 changes: 9 additions & 0 deletions credentials/development/attestation/Matter-Development-PAI-FFF1-noPID-CRL.pem
View file
Open in desktop
tcarmelveilleux marked this conversation as resolved.
Show resolved Hide resolved
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The CRLs have to be regenerated with the Authority Key Identifier extension matching the CRLSignerCertificates Subject Key Identifier.

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

To add this you can update the ca.conf you use to include:

[ crl_ext ]
authorityKeyIdentifier=keyid:always

and within the [ ca ], or where the default_ca points to add:
crl_extensions = crl_ext

Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
-----BEGIN X509 CRL-----
MIIBKTCB0QIBATAKBggqhkjOPQQDAjA9MSUwIwYDVQQDDBxNYXR0ZXIgRGV2IFBB
SSAweEZGRjEgbm8gUElEMRQwEgYKKwYBBAGConwCAQwERkZGMRcNMjQxMjEzMDcx
NjI1WhgPMjEyNDEyMTQwNzE2MjVaMFEwGQIICrBCSUMj/lQXDTI0MTIxMzA3MTUz
MlowGQIIGTZ9l46sUzoXDTI0MTIxMzA3MTUyNFowGQIIJWk4PSS7NuoXDTI0MTIx
MzA3MTUyOFqgDjAMMAoGA1UdFAQDAgEDMAoGCCqGSM49BAMCA0cAMEQCIDmRScsX
0ezPt/xT+jAud28PybPXB8hJUPLZ5C/cipVkAiBm8IZJ68M6KFBWTCtENGsOKNC8
MTv6C0bmMWA52+LLkQ==
-----END X509 CRL-----
Binary file added credentials/test/attestation/Chip-Test-DAC-FFF1-8001-Singed-By-Revoked-PAI-Cert.der
View file
Open in desktop
Binary file not shown.
13 changes: 13 additions & 0 deletions credentials/test/attestation/Chip-Test-DAC-FFF1-8001-Singed-By-Revoked-PAI-Cert.pem
View file
Open in desktop
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • Please rename Singed to Signed everywhere.

Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Binary file added credentials/test/attestation/Chip-Test-DAC-FFF1-8001-Singed-By-Revoked-PAI-Key.der
View file
Open in desktop
Binary file not shown.
5 changes: 5 additions & 0 deletions credentials/test/attestation/Chip-Test-DAC-FFF1-8001-Singed-By-Revoked-PAI-Key.pem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
-----BEGIN EC PRIVATE KEY-----
MHcCAQEEIJH6kWQP7l3MWrVt7LHLTS4AVsFrRSgxBMDISewT3M7voAoGCCqGSM49
AwEHoUQDQgAEsNfyDFfIJAuXVFa6iG0ssJzU+dL1zxQG9GPJeYPzTtWjZ2H2ltiv
9PPigoZbw3kU3rUSquiOWhWnGaS1eiZkDw==
-----END EC PRIVATE KEY-----
Binary file added credentials/test/attestation/Chip-Test-PAA-FFF1-CRL.der
View file
Open in desktop
Binary file not shown.
7 changes: 7 additions & 0 deletions credentials/test/attestation/Chip-Test-PAA-FFF1-CRL.pem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
-----BEGIN X509 CRL-----
MIHmMIGOAgEBMAoGCCqGSM49BAMCMDAxGDAWBgNVBAMMD01hdHRlciBUZXN0IFBB
QTEUMBIGCisGAQQBgqJ8AgEMBEZGRjEXDTI0MTIxMzA3MjA1NFoYDzIxMjQxMjE0
MDcyMDU0WjAbMBkCCDAmZDkrij8qFw0yNDEyMTMwNzIwMjFaoA4wDDAKBgNVHRQE
AwIBATAKBggqhkjOPQQDAgNHADBEAiA5wPbD/kmPBKSz2w3m0NmZVlpX81Yno9gZ
b0BTD6zy5gIgA5roJ/1t0ym4Ab8/oSWRSD6acSVv5QqsvFnBJoGwoJA=
-----END X509 CRL-----
Binary file added credentials/test/attestation/Chip-Test-PAI-FFF1-noPID-Revoked-Cert.der
View file
Open in desktop
Binary file not shown.
12 changes: 12 additions & 0 deletions credentials/test/attestation/Chip-Test-PAI-FFF1-noPID-Revoked-Cert.pem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Binary file added credentials/test/attestation/Chip-Test-PAI-FFF1-noPID-Revoked-Key.der
View file
Open in desktop
Binary file not shown.
5 changes: 5 additions & 0 deletions credentials/test/attestation/Chip-Test-PAI-FFF1-noPID-Revoked-Key.pem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
-----BEGIN EC PRIVATE KEY-----
MHcCAQEEIH/u0uB3zq1YnR1XR58XEUVgOnq8mLeBoJH1AYvyJW9joAoGCCqGSM49
AwEHoUQDQgAEvVioT3hi4HUcTlYoDxSWl998UarcWk+jk8lid6WQed5AkHq3hg0G
neZS6ovI9wU7/nw6jvRwDXa5zCDbMSyvkQ==
-----END EC PRIVATE KEY-----
Loading