EtsiTs102941.mjs

import * as Ieee1609Dot2 from 'Ieee1609Dot2js';
import {Uint8, Choice, Sequence, SequenceOf, Enumerated, Boolean, Integer, IA5String } from 'asnjs';
import {EeRaCertRequest, RaEeCertInfo, RaAcaCertRequest, AcaRaCertResponse, EeRaDownloadRequest } from 'Ieee1609Dot2Dot1js';

export class EnrolmentResponseCode extends Enumerated([
    'ok',
    'cantparse', //valid for any structure
    'badcontenttype', //not encrypted, not signed, not enrolmentrequest
    'imnottherecipient', //the “recipients” doesn’t include me
    'unknownencryptionalgorithm', //either kexalg or contentencryptionalgorithm
    'decryptionfailed', //works for ECIES_HMAC and AES_CCM
    'unknownits', //can’t retrieve the ITS from the itsId
    'invalidsignature', //signature verification of the request fails
    'invalidencryptionkey', //signature is good, but the responseEncryptionKey is bad
    'baditsstatus', //revoked, not yet active
    'incompleterequest', //some elements are missing
    'deniedpermissions', //requested permissions are not granted
    'invalidkeys', //either the verification_key of the encryption_key is bad
    'deniedrequest', //any other reason ?
    Enumerated.Extension
]) { }

export class AuthorizationResponseCode extends Enumerated([
    'ok',
    //ITS -> AA
    'its_aa_cantparse', //valid for any structure
    'its_aa_badcontenttype', //not encrypted, not signed, not authorizationrequest
    'its_aa_imnottherecipient', //the “recipients” of the outermost encrypted data doesn’t include me
    'its_aa_unknownencryptionalgorithm', //either kexalg or contentencryptionalgorithm
    'its_aa_decryptionfailed', //works for ECIES_HMAC and AES_CCM
    'its_aa_keysdontmatch', //HMAC keyTag verification fails
    'its_aa_incompleterequest', //some elements are missing
    'its_aa_invalidencryptionkey', //the responseEncryptionKey is bad
    'its_aa_outofsyncrequest', //signingTime is outside acceptable limits
    'its_aa_unknownea', //the EA identified by eaId is unknown to me
    'its_aa_invalidea', //the EA certificate is revoked
    'its_aa_deniedpermissions', //I, the AA, deny the requested permissions
    //AA -> EA
    'aa_ea_cantreachea', //the EA is unreachable(network error ?)
    //EA -> AA
    'ea_aa_cantparse', //valid for any structure
    'ea_aa_badcontenttype', //not encrypted, not signed, not authorizationrequest
    'ea_aa_imnottherecipient', //the “recipients” of the outermost encrypted data doesn’t include me
    'ea_aa_unknownencryptionalgorithm', //either kexalg or contentencryptionalgorithm
    'ea_aa_decryptionfailed', //works for ECIES_HMAC and AES_CCM
    //TODO: to be continued...
    'invalidaa', //the AA certificate presented is invalid / revoked / whatever
    'invalidaasignature', //the AA certificate presented can’t validate the request signature
    'wrongea', //the encrypted signature doesn’t designate me as the EA
    'unknownits', //can’t retrieve the EC / ITS in my DB
    'invalidsignature', //signature verification of the request by the EC fails
    'invalidencryptionkey', //signature is good, but the key is bad
    'deniedpermissions', //permissions not granted
    'deniedtoomanycerts', //parallel limit
    Enumerated.Extension
]) { }

export class AuthorizationValidationResponseCode extends Enumerated([
    'ok',
    'cantparse', //valid for any structure
    'badcontenttype', //not encrypted, not signed, not permissionsverificationrequest
    'imnottherecipient', //the “recipients” of the outermost encrypted data doesn’t include me
    'unknownencryptionalgorithm', //either kexalg or contentencryptionalgorithm
    'decryptionfailed', //works for ECIES - HMAC and AES - CCM
    'invalidaa', //the AA certificate presented is invalid / revoked / whatever
    'invalidaasignature', //the AA certificate presented can’t validate the request signature
    'wrongea', //the encrypted signature doesn’t designate me as the EA
    'unknownits', //can’t retrieve the EC / ITS in my DB
    'invalidsignature', //signature verification of the request by the EC fails
    'invalidencryptionkey', //signature is good, but the responseEncryptionKey is bad
    'deniedpermissions', //requested permissions not granted
    'deniedtoomanycerts', //parallel limit
    'deniedrequest', //any other reason ?
    Enumerated.Extension
]) { }

export class PublicKeys extends Sequence([
    {
        name: 'verificationKey',
        type: Ieee1609Dot2.PublicVerificationKey
    }, {
        name: 'encryptionKey',
        optional: true,
        type: Ieee1609Dot2.PublicEncryptionKey
    }
]) { }

export class CertificateSubjectAttributes extends Sequence([
    {
        name: 'id',
        optional: true,
        type: Ieee1609Dot2.CertificateId
    }, {
        name: 'validityPeriod',
        optional: true,
        type: Ieee1609Dot2.ValidityPeriod
    }, {
        name: 'region',
        optional: true,
        type: Ieee1609Dot2.GeographicRegion
    }, {
        name: 'assuranceLevel',
        optional: true,
        type: Ieee1609Dot2.SubjectAssurance
    }, {
        name: 'appPermissions',
        optional: true,
        type: SequenceOf(Ieee1609Dot2.PsidSsp)
    }, {
        name: 'certIssuePermissions',
        optional: true,
        type: SequenceOf(Ieee1609Dot2.PsidGroupPermissions)
    }, {
        extension: true
    }
]) { }

export class SharedAtRequest extends Sequence([
    {
        name: 'eaId',
        type: Ieee1609Dot2.HashedId8
    }, {
        name: 'keyTag',
        type: Ieee1609Dot2.OctetString16
    }, {
        name: 'certificateFormat',
        type: Uint8
    }, {
        name: 'requestedSubjectAttributes',
        type: CertificateSubjectAttributes
    }, {
        extension: true
    }
]) { }

export class ToBeSignedCrl extends Sequence([
    {
        name: 'version',
        type: Integer()
    }, {
        name: 'thisUpdate',
        type: Ieee1609Dot2.Time32
    }, {
        name: 'nextUpdate',
        type: Ieee1609Dot2.Time32
    }, {
        name: 'entries',
        type: SequenceOf(Ieee1609Dot2.HashedId8)
    }, {
        extension:true
    }
]) { }

export class CtlFormat extends Sequence([
    {
        name: 'version',
        type: Integer()
    }, {
        name: 'nextUpdate',
        type: Ieee1609Dot2.Time32
    }, {
        name: 'isFullCtl',
        type: Boolean
    }, {
        name: 'ctlSequence',
        type: Uint8
    }, {
        name: 'ctlCommands',
        type: SequenceOf(Choice([
            {
                name: 'add',
                type: Choice([
                    {
                        name: 'rca', type: Sequence([
                            { name: 'selfsignedRootCa', type: Ieee1609Dot2.Certificate },
                            { name: 'linkRootCaCertificate', optional: true, type: Ieee1609Dot2.Certificate }
                        ])
                    }, {
                        name: 'ea', type: Sequence([
                            { name: 'eaCertificate', type: Ieee1609Dot2.Certificate },
                            { name: 'aaAccessPoint', type: IA5String },
                            { name: 'itsAccessPoint', optional: true, type: IA5String }
                        ])
                    }, {
                        name: 'aa', type: Sequence([
                            { name: 'aaCertificate', type: Ieee1609Dot2.Certificate },
                            { name: 'accessPoint', type: IA5String }
                        ])
                    }, {
                        name: 'dc', type: Sequence([
                            { name: 'url', type: IA5String },
                            { name: 'cert', optional: true, type: SequenceOf(Ieee1609Dot2.HashedId8) }
                        ])
                    }, {
                        name: 'tlm', type: Sequence([
                            { name: 'selfSignedTLMCertificate', type: Ieee1609Dot2.Certificate },
                            { name: 'linkTLMCertificate', type: Ieee1609Dot2.Certificate, optional: true },
                            { name: 'accessPoint', type: IA5String }
                        ])
                    }, {
                        extension:true
                    }
                ])
            }, {
                name: 'delete',
                type: Choice([
                    { name: 'cert', type: Ieee1609Dot2.HashedId8 },
                    { name: 'dc', type: IA5String },
                    { extension:true }
                ])
            }, {
                extension: true
            }
        ]))
    }, {
        extension: true
    }
]) { }

export class CaCertificateRequest extends Sequence([
    {
        name: 'publicKeys',
        type: PublicKeys
    }, {
        name: 'requestedSubjectAttributes',
        type: CertificateSubjectAttributes
    }, {
        extension: true
    }
]) { }

export class EcSignature extends Choice([
    {
        name: 'encryptedEcSignature',
        type: Ieee1609Dot2.Data
    }, {
        name: 'ecSignature',
        type: Ieee1609Dot2.Data
    }
]) { }

export class InnerEcResponse extends Sequence([
    {
        name: 'requestHash',
        type: Ieee1609Dot2.OctetString16
    }, {
        name: 'responseCode',
        type: EnrolmentResponseCode
    }, {
        name: 'certificate',
        optional: true,
        type: Ieee1609Dot2.Certificate
    }, {
        extension:true
    }
]){}
export class InnerAtRequest extends Sequence([
    {
        name: 'publicKeys',
        type: PublicKeys
    }, {
        name: 'hmacKey',
        type: Ieee1609Dot2.OctetString32
    }, {
        name: 'sharedAtRequest',
        type: SharedAtRequest
    }, {
        name: 'ecSignature',
        type: EcSignature
    }, {
        extension:true
    }
]){}
export class InnerAtResponse extends Sequence([
    {
        name: 'requestHash',
        type: Ieee1609Dot2.OctetString16
    }, {
        name: 'responseCode',
        type: AuthorizationResponseCode
    }, {
        name: 'certificate',
        optional: true,
        type: Ieee1609Dot2.Certificate
    }, {
        extension: true
    }
]){}

export class AuthorizationValidationRequest extends Sequence([
    {
        name: 'sharedAtRequest',
        type: SharedAtRequest
    }, {
        name: 'ecSignature',
        type: EcSignature
    }, {
        extension:true
    }
]){}

export class AuthorizationValidationResponse extends Sequence([
    {
        name: 'requestHash',
        type: Ieee1609Dot2.OctetString16
    }, {
        name: 'responseCode',
        type: AuthorizationValidationResponseCode
    }, {
        name: 'confirmedSubjectAttributes',
        optional: true,
        type: CertificateSubjectAttributes
    }, {
        extension: true
    }
]){}

export class ToBeSignedLinkCertificate extends Sequence ([
    {
        name: "expiryTime",
        type: Ieee1609Dot2.Time32
    },{
        name: "certificateHash",
        type: Ieee1609Dot2.HashedData
    },{
        extension:true
    }
]){}
  
export function EtsiTs102941ButterflyAuthorizationRequest_X509Signed ( inner ) {
    var C = class EtsiTs102941ButterflyAuthorizationRequest_X509Signed extends Ieee1609Dot2Data {
        static from_oer(dc) {
            /** @type {Ieee1609Dot2Data} */
            let outer = super.from_oer(dc);
            try {
                outer.content.signedX509CertificateRequest.content = inner.from_oer(outer.content.signedX509CertificateRequest.dataCursor());
            } catch(e){
            }
            return outer;
        }
    };
    if(inner.fields)
        C.innerFields = inner.fields;
    return C;
}

export class EtsiTs102941DataContent extends Choice([
    {
        name: 'enrolmentRequest',
        type: Ieee1609Dot2.Data
    }, {
        name: 'enrolmentResponse',
        type: InnerEcResponse
    }, {
        name: 'authorizationRequest',
        type: InnerAtRequest
    }, {
        name: 'authorizationResponse',
        type: InnerAtResponse
    }, {
        name: 'certificateRevocationList',
        type: ToBeSignedCrl
    }, {
        name: 'certificateTrustListTlm',
        type: CtlFormat
    }, {
        name: 'certificateTrustListRca',
        type: CtlFormat
    }, {
        name: 'authorizationValidationRequest',
        type: AuthorizationValidationRequest
    }, {
        name: 'authorizationValidationResponse',
        type: AuthorizationValidationResponse
    }, {
        name: 'caCertificateRequest',
        type: CaCertificateRequest
    }, {
        estension:true
    }, {
        name: 'linkCertificateTlm',
        type: ToBeSignedLinkCertificate
    }, {
        name: 'singleSignedLinkCertificateRca',
        type: ToBeSignedLinkCertificate
    }, {
        name: 'doubleSignedlinkCertificateRca',
        type: Ieee1609Dot2.Data
    }, 
    
    // Butterfly authorisation
    {
        name: 'butterflyAuthorizationRequest',
        type: EeRaCertRequest
    }, {
        name: 'x509SignedbutterflyAuthorizationRequest',
        type: EtsiTs102941ButterflyAuthorizationRequest_X509Signed
    }, {
        name: 'butterflyAuthorizationResponse',
        type: RaEeCertInfo
    }, {
        name: 'butterflyCertificateRequest',
        type: RaAcaCertRequest
    }, {
        name: 'butterflyCertificateResponse',
        type: AcaRaCertResponse
    }, {
        name: 'butterflyAtDownloadRequest',
        type: EeRaDownloadRequest
    }
])
{};

export class EtsiTs102941Data extends Sequence([
    {
        name: 'version',
        type: Uint8,
    }, {
        name: 'content',
        type: EtsiTs102941DataContent
    }
]) { }