Comments (2)
steven-bellock
commented on August 22, 2024
With LIBSPDM_DATA_LOCAL_PUBLIC_CERT_CHAIN are you forming the entire SPDM certificate chain structure?
| Byte offset | Field | Size (bytes) | Description |
|---|---|---|---|
| 0 | Length | 2 | Shall be the total length of the certificate chain, in bytes, including all fields in this table. This field is little endian. |
| 2 | Reserved | 2 | Reserved. |
| 4 | RootHash | H | Shall be the digest of the Root Certificate. Note that the Root Certificate is ASN.1 DER-encoded for this digest. This field shall be in hash byte order. H is the output size, in bytes, of the hash algorithm selected by the most recent ALGORITHMS response. |
| 4 + H | Certificates | Length - (4 + H) | Shall be a complete certificate chain consisting of one or more ASN.1 DER-encoded X.509 v3 certificates. This field shall be in Encoded ASN.1 byte order. |
I noticed the documentation does not explicitly specify this.
Lines 235 to 238 in 96a7a39
from libspdm.
mazen-mahmoud16
commented on August 22, 2024
It works but the issue was in
cat rootCA.der intermediateCA.der leaf.der > certificate_chain.der
When I concat the files manually into certificate_chain.der it works.
from libspdm.
Related Issues (20)
- Check state of send / receive buffers at end of unit tests
- Build failure in `spdm_device_secret_lib_sample`
- Build failure in `libspdm_rsp_challenge_auth.c` HOT 2
- Core libraries must not zeroize the receive buffer
- Removal of disclaimer that libspdm is not fit for production HOT 3
- Incorrect use of logical negation in unit tests HOT 1
- Need add `FINISH_RSP` test case to cover the scenario: either the Requester or the Responder set `HANDSHAKE_IN_THE_CLEAR_CAP` to 0.
- Handle Responder sending `END_SESSION` in application phase HOT 3
- The version assert check is duplicate in get_csr and set_cert
- The libspdm_event_get_types API should not be under the LIBSPDM_ENABLE_CAPABILITY_CSR_CAP
- the vendor_cmds requester unit_test has some error HOT 3
- DOE Discovery Version shall be supported in pci_doe_discovery
- `libspdm_set_mem(requester_context, SPDM_REQ_CONTEXT_SIZE, 0xAA)` will overflow write in `libspdm_test_responder_measurements_case36` HOT 1
- github_pages branch vastly inflates size of repository HOT 4
- Improve `LIBSPDM_DATA_LOCAL_PUBLIC_CERT_CHAIN` documentation
- Capability flags should be masked with version mask HOT 1
- Update CodeQL actions from version 2 to version 3
- Dead code after loop
- Out-of-bounds array read
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from libspdm.