Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Errors about certificates needed to start sending messages #1

Open
PedoneMatteo opened this issue Jul 9, 2024 · 0 comments
Open

Errors about certificates needed to start sending messages #1

PedoneMatteo opened this issue Jul 9, 2024 · 0 comments

Comments

@PedoneMatteo
Copy link

Dear Mr. Denis Filatov,

I am Matteo Pedone, an MSc student at Politecnico di Torino: major in Computer Engineering, minor in CyberSecurity.
I found your repository about the FitSec CAM/DENM message generator very interesting. I am trying to have a look and also to build and run the code. I would like to explain some issues that I faced.
To understand if I am proceeding without errors from the beginning, I list the more relevant steps I did:

  • I built the fsmsggen repository and the itscertgen repository, creating a Makefile.am.libasncodec similar to that present in fsmsggen/payload and putting it into the itscertgen/certgen/asncodec path.
  • I also cloned the TS.ITS repository, I redefined the path of CERTGEN in the TS.ITS/data/certificates/Makefile and I built it to generate the certificates, xer and temp folders in TS.ITS/data/certificates path.

At this point, I read in your documentation that to start sending messages I need the Root CA, AA, and at least one AT certificate. So I created the folder POOL_CAM in fsmsggen/build/x86_64-linux-gnu-d and for the first time, I filled it with all files in the certificates folder created in TS.ITS/data/certificates and for a second time I filled it with only three files of type .oer, which are three certificates respectively for RCA, AA, and AT, randomly chosen among the certificates created.
I tried to run the command ./fsmsggen -i eth0 -1 ./POOL_CAM.
For the first case, I had the error about the certificate signer unknown and certificate app permission invalid, and when sending the message starts:
1 SEND FinalizeSignedMessage: ERROR: 0x840000BF message certificate time unknown error
For the second one, I had the error about the certificate signer unknown, and when sending the message starts:
1 SEND FinalizeSignedMessage: ERROR: 0x8400000B message certificate not found
For clarity, I attach a file containing these two outputs (./POOL_CAM contains all the files, and ./three_certificates contains only the three ones). outputError_command_fsmsggen.txt
I thought that I had to create and sign manually the certificates, so I moved to /itscertgen/build/x86_64-linux-gnu-d and I ran the command ./certgen -o ./outputCertificates/ CERT_IUT_A_AA.xml CERT_IUT_A_RCA.oer, specifying an output folder, a profile for AA and an RCA certificate as a signer, but I faced to this issue:

root@LAPTOP-0J4A9HTR:~/Project_FsMsGen/itscertgen/build/x86_64-linux-gnu-d# ./certgen -o ./outputCertificates/ CERT_IUT_A_AA.xml CERT_IUT_A_RCA.oer
CERT_IUT_A_AA: failed to load at position 77
  <certificate>
        <version>3</ve

I had this failure with also different files .xml but the files are ok, so I do not understand the error.
I apologize for the long text, I hope that my explanations are complete and easy to understand.
Do not hesitate to tell me if I made some mistakes during the steps that I described before. I need some suggestions or fixes to solve these issues, run the code to start sending messages with proper certificates, without any other errors.
I look forward to hearing from you.

Kind regards,
Matteo Pedone.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant