| # Copyright (c) 2021 Project CHIP Authors |
| # |
| # Licensed under the Apache License, Version 2.0 (the "License"); |
| # you may not use this file except in compliance with the License. |
| # You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| # See the License for the specific language governing permissions and |
| # limitations under the License. |
| # Auto-generated scripts for harness use only, please review before automation. The endpoints and cluster names are currently set to default |
| |
| name: 4.1.7. [TC-DA-1.7] Validate CertificateChainRequest [DUT-Commissionee] |
| |
| PICS: |
| - MCORE.ROLE.COMMISSIONEE |
| |
| config: |
| nodeId: 0x12344321 |
| cluster: "Basic" |
| endpoint: 0 |
| |
| tests: |
| - label: "Pre-Conditions TH only has official PAAs from DCL" |
| verification: | |
| verification step to be updated. |
| disabled: true |
| |
| - label: "Commission DUT1 to TH fabric" |
| verification: | |
| sudo ./chip-all-clusters-app --wifi |
| |
| TH side: |
| ./chip-tool pairing ble-wifi 1 zigbeehome matter123 20202021 3841 --trace_decode 1 |
| |
| [1650455358.501816][4366:4371] CHIP:TOO: Device commissioning completed with success |
| disabled: true |
| |
| - label: |
| "TH sends CertificateChainRequest Command to DUT1 with the |
| CertificateType set to PAICertificate" |
| verification: | |
| Verify that the DUT returns a CertificateChainResponse. Save the returned Certificate as "pai_1" |
| |
| To get PAI value, send below command. |
| |
| ./chip-tool operationalcredentials certificate-chain-request 2 1 0 --trace_decode 1 |
| |
| "Verify in TH(chip-tool) log: |
| |
| [1657774756.281112][7964:7969] CHIP:DMG: Received Command Response Data, Endpoint=0 Cluster=0x0000_003E Command=0x0000_0003 |
| [1657774756.281164][7964:7969] CHIP:TOO: Endpoint: 0 Cluster: 0x0000_003E Command 0x0000_0003 |
| [1657774756.281236][7964:7969] CHIP:TOO: CertificateChainResponse: { |
| [1657774756.281289][7964:7969] CHIP:TOO: certificate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|
| [1657774756.281357][7964:7969] CHIP:TOO: ...........: B88FACE529368D12054C0C0220655DC92B86BD909882A6C62177B825D7D05EDBE7C22F9FEA71220E7EA703F891 |
| [1657774756.281388][7964:7969] CHIP:TOO: } |
| disabled: true |
| |
| - label: |
| "TH sends CertificateChainRequest Command to DUT1 with the |
| CertificateType set to DACCertificate" |
| verification: | |
| Verify that the DUT returns a CertificateChainResponse. Save the returned Certificate as "dac_1" |
| |
| To get DAC value, send below command. |
| |
| ./chip-tool operationalcredentials certificate-chain-request 1 1 0 --trace_decode 1 |
| |
| "Verify in TH(all-clusters-app) log: |
| |
| [1657774717.721972][7956:7961] CHIP:DMG: Received Command Response Data, Endpoint=0 Cluster=0x0000_003E Command=0x0000_0003 |
| [1657774717.722019][7956:7961] CHIP:TOO: Endpoint: 0 Cluster: 0x0000_003E Command 0x0000_0003 |
| [1657774717.722135][7956:7961] CHIP:TOO: CertificateChainResponse: { |
| [1657774717.722181][7956:7961] CHIP:TOO: certificate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|
| [1657774717.722269][7956:7961] CHIP:TOO: ...........: 034700304402200127A27B4B44610EE2FCDC4D2B7885563660BC0F76F17219ED6A08DFB2B3C1CD02206B59E0AF45F3EB2A85B919D35731528C6028C415239545E108E4E54E70971353 |
| [1657774717.722297][7956:7961] CHIP:TOO: } |
| disabled: true |
| |
| - label: "TH extracts the Authority Key Identifier from the PAI certificate" |
| verification: | |
| During commissioning we will get PAI certificate, see on TH(chip-tool) log: |
| |
| [1659415376.883870][2666:2671] CHIP:CTL: Performing next commissioning step "SendPAICertificateRequest" |
| [1659415376.883925][2666:2671] CHIP:CTL: Sending request for PAI certificate |
| [1659415376.884015][2666:2671] CHIP:CTL: Sending Certificate Chain request to 0xffffa0000b60 device |
| [1659415376.884167][2666:2671] CHIP:DMG: ICR moving to [AddingComm] |
| [1659415376.884302][2666:2671] CHIP:DMG: ICR moving to [AddedComma] |
| [1659415376.884867][2666:2671] CHIP:IN: Prepared secure message 0xffffb37ec8d8 to 0xFFFFFFFB00000000 (0) of type 0x8 and protocolId (0, 1) on exchange 61632i with MessageCounter:72933899. |
| [1659415376.884965][2666:2671] CHIP:IN: Sending encrypted msg 0xffffb37ec8d8 with MessageCounter:72933899 to 0xFFFFFFFB00000000 (0) at monotonic time: 0000000000161D55 msec |
| [1659415376.885796][2666:2671] CHIP:DMG: >> to BLE | 72933899 | [Interaction Model (1) / InvokeCommandRequest (0x08) / Session = 384 / Exchange = 61632] |
| [1659415376.885890][2666:2671] CHIP:DMG: Header Flags = |
| [1659415376.885944][2666:2671] CHIP:DMG: { |
| [1659415376.886028][2666:2671] CHIP:DMG: Exchange (0x01) = |
| [1659415376.886081][2666:2671] CHIP:DMG: { |
| [1659415376.886154][2666:2671] CHIP:DMG: Initiator = true |
| [1659415376.886206][2666:2671] CHIP:DMG: } |
| [1659415376.886296][2666:2671] CHIP:DMG: } |
| [1659415376.886350][2666:2671] CHIP:DMG: |
| [1659415376.886438][2666:2671] CHIP:DMG: Encrypted Payload (62 bytes) = |
| [1659415376.886492][2666:2671] CHIP:DMG: { |
| [1659415376.886542][2666:2671] CHIP:DMG: data = 008001000be258046e751fb56b97dabcc7ee6b6611ede33a66461e188834bb1fe5b6332edb4a3896d32bce2eb59dee722e070c4426af77c82dfca14619bb |
| [1659415376.886616][2666:2671] CHIP:DMG: buffer_ptr = 281473366182720 |
| [1659415376.886666][2666:2671] CHIP:DMG: } |
| [1659415376.886714][2666:2671] CHIP:DMG: |
| [1659415376.886900][2666:2671] CHIP:DMG: InvokeRequestMessage = |
| [1659415376.886962][2666:2671] CHIP:DMG: { |
| [1659415376.887039][2666:2671] CHIP:DMG: suppressResponse = false, |
| [1659415376.887103][2666:2671] CHIP:DMG: timedRequest = false, |
| [1659415376.887162][2666:2671] CHIP:DMG: InvokeRequests = |
| [1659415376.887234][2666:2671] CHIP:DMG: [ |
| [1659415376.887312][2666:2671] CHIP:DMG: CommandDataIB = |
| [1659415376.887380][2666:2671] CHIP:DMG: { |
| [1659415376.887442][2666:2671] CHIP:DMG: CommandPathIB = |
| [1659415376.887538][2666:2671] CHIP:DMG: { |
| [1659415376.887633][2666:2671] CHIP:DMG: EndpointId = 0x0, |
| [1659415376.887874][2666:2671] CHIP:DMG: ClusterId = 0x3e, |
| [1659415376.888039][2666:2671] CHIP:DMG: CommandId = 0x2, |
| [1659415376.888125][2666:2671] CHIP:DMG: }, |
| [1659415376.888225][2666:2671] CHIP:DMG: |
| [1659415376.888289][2666:2671] CHIP:DMG: CommandFields = |
| [1659415376.888384][2666:2671] CHIP:DMG: { |
| [1659415376.888478][2666:2671] CHIP:DMG: 0x0 = 2, |
| [1659415376.888560][2666:2671] CHIP:DMG: }, |
| [1659415376.888655][2666:2671] CHIP:DMG: }, |
| [1659415376.888728][2666:2671] CHIP:DMG: |
| [1659415376.888806][2666:2671] CHIP:DMG: ], |
| [1659415376.888877][2666:2671] CHIP:DMG: |
| [1659415376.888955][2666:2671] CHIP:DMG: InteractionModelRevision = 1 |
| [1659415376.889012][2666:2671] CHIP:DMG: }, |
| [1659415376.889086][2666:2671] CHIP:DMG: |
| [1659415376.889368][2666:2671] CHIP:DMG: ICR moving to [CommandSen] |
| [1659415376.889523][2666:2671] CHIP:DMG: ICR moving to [AwaitingDe] |
| [1659415376.972895][2666:2671] CHIP:DL: HandlePlatformSpecificBLEEvent 16387 |
| [1659415377.021227][2666:2669] CHIP:DL: Indication received, conn = 0xffffa803b9b0 |
| [1659415377.021488][2666:2671] CHIP:DL: HandlePlatformSpecificBLEEvent 16389 |
| [1659415377.122119][2666:2669] CHIP:DL: Indication received, conn = 0xffffa803b9b0 |
| [1659415377.122505][2666:2671] CHIP:DL: HandlePlatformSpecificBLEEvent 16389 |
| [1659415377.217641][2666:2669] CHIP:DL: Indication received, conn = 0xffffa803b9b0 |
| [1659415377.217905][2666:2671] CHIP:DL: HandlePlatformSpecificBLEEvent 16389 |
| [1659415377.219135][2666:2671] CHIP:DMG: << from BLE | 199585160 | [Interaction Model (1) / InvokeCommandResponse (0x09) / Session = 46479 / Exchange = 61632] |
| [1659415377.219238][2666:2671] CHIP:DMG: Header Flags = |
| [1659415377.219295][2666:2671] CHIP:DMG: { |
| [1659415377.219391][2666:2671] CHIP:DMG: } |
| [1659415377.219446][2666:2671] CHIP:DMG: |
| [1659415377.219518][2666:2671] CHIP:DMG: Encrypted Payload (527 bytes) = |
| [1659415377.219573][2666:2671] CHIP:DMG: { |
| [1659415377.219626][2666:2671] CHIP:DMG: data = 008fb500886de50b9dd1c80f8f48187dc9457d6066ed57c1f15550aefb6a675573c3fcff99cc266b26bdbd97c5ac460ff50e513fd8ef02f39294c2e79b507b0d7b6342caea806048b1c64804aae7bb9d4cdb04d4c7c4d345788e332256c05e7ea38eddd7693e4a39cdfe625688f0101cf16af6f5281049b25e47e6931b06c832d9a014a8248d7cfe31d8b75ebb7805b511293591caa108030939b43b951ad2a164692b051201f9c777e769b9632f05b94bc1990718ec3d2e0fa0161da28ec39bc51017c519e994e9fbbc68693e86ae9fa72618a5a0bc9a133e919bf61ca0805a90a09807c5c4b88329bd1d99149788c5464650dc3b7223e11f4d5a487c0b589453f725b035b543b0159801bee756dcd835832af45402931d73f4977371c90a3fd406905b278fefccf607e0699cac0b082d062b563f17d6e9438720a885f6b5d0dd035d652fd9b88790b1e79995030977f4423139eff3d2e36915065474ea1996705bd63b40395344e402c191e54c1c136c4daa31040ea09cc39c5804dd4203763d05e30d2cfd50ed84e12fd01ecf9c49a4bf7fe73c13416af1cc8bed4f5f2e8919f5724d698990115f97c08f43f9dd463883b53d09e6f888ac8a8d8ba91bd65b242ae049cccd4af6fdcfa402877ba10fb560008d07054deb1e9f1a39fd9110930e1e620fc64f999255a52f8064dc1c83fe6aa35de56c44850e932c82919c1f1af174afa75f3ef77c8b08fcace33883 |
| [1659415377.219729][2666:2671] CHIP:DMG: buffer_ptr = 281473366176768 |
| [1659415377.219780][2666:2671] CHIP:DMG: } |
| [1659415377.219830][2666:2671] CHIP:DMG: |
| [1659415377.220104][2666:2671] CHIP:DMG: DAC/PAI (463) = |
| [1659415377.220220][2666:2671] CHIP:DMG: { |
| -----BEGIN CERTIFICATE----- |
| MIIByzCCAXGgAwIBAgIIVq2CIq2UW2QwCgYIKoZIzj0EAwIwMDEYMBYGA1UEAwwP |
| TWF0dGVyIFRlc3QgUEFBMRQwEgYKKwYBBAGConwCAQwERkZGMTAgFw0yMjAyMDUw |
| MDAwMDBaGA85OTk5MTIzMTIzNTk1OVowPTElMCMGA1UEAwwcTWF0dGVyIERldiBQ |
| QUkgMHhGRkYxIG5vIFBJRDEUMBIGCisGAQQBgqJ8AgEMBEZGRjEwWTATBgcqhkjO |
| PQIBBggqhkjOPQMBBwNCAARBmpMVwhc+DIyHbQPM/JRIUmR/f+xeUIL0BZko7KiU |
| xZQVEwmsYx5MsDOSr2hLC6+35ls7gWLC9Sv5MbjneqqCo2YwZDASBgNVHRMBAf8E |
| CDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUY1QOR/ZLHDjROISk |
| YtFsGV2P+zwwHwYDVR0jBBgwFoAUav0idx9RH+y/FkGXZxDc3DGhcX4wCgYIKoZI |
| zj0EAwIDSAAwRQIhALLvJ/Sa6bUPuR7qyUxNC9u415KcbLiPrOUpNo0SBUwMAiBl |
| Xckrhr2QmIKmxiF3uCXX0F7b58Ivn+pxIg5+pwP4kQ== |
| -----END CERTIFICATE----- |
| [1659415377.220439][2666:2671] CHIP:DMG: } |
| [1659415377.220490][2666:2671] CHIP:DMG: |
| [1659415377.220553][2666:2671] CHIP:DMG: |
| [1659415377.220635][2666:2671] CHIP:DMG: Additional Fields = |
| [1659415377.220689][2666:2671] CHIP:DMG: { |
| [1659415377.220748][2666:2671] CHIP:DMG: peer_address = BLE |
| [1659415377.220801][2666:2671] CHIP:DMG: } |
| [1659415377.220850][2666:2671] CHIP:DMG: |
| [1659415377.220914][2666:2671] CHIP:EM: Received message of type 0x9 with protocolId (0, 1) and MessageCounter:199585160 on exchange 61632i |
| [1659415377.220977][2666:2671] CHIP:EM: Found matching exchange: 61632i, Delegate: 0xffffa803c898 |
| [1659415377.221071][2666:2671] CHIP:DMG: ICR moving to [ResponseRe] |
| [1659415377.221162][2666:2671] CHIP:DMG: InvokeResponseMessage = |
| [1659415377.221222][2666:2671] CHIP:DMG: { |
| [1659415377.221279][2666:2671] CHIP:DMG: suppressResponse = false, |
| [1659415377.221339][2666:2671] CHIP:DMG: InvokeResponseIBs = |
| [1659415377.221413][2666:2671] CHIP:DMG: [ |
| [1659415377.221473][2666:2671] CHIP:DMG: InvokeResponseIB = |
| [1659415377.221551][2666:2671] CHIP:DMG: { |
| [1659415377.221615][2666:2671] CHIP:DMG: CommandDataIB = |
| [1659415377.221691][2666:2671] CHIP:DMG: { |
| [1659415377.221764][2666:2671] CHIP:DMG: CommandPathIB = |
| [1659415377.221855][2666:2671] CHIP:DMG: { |
| [1659415377.221949][2666:2671] CHIP:DMG: EndpointId = 0x0, |
| [1659415377.222037][2666:2671] CHIP:DMG: ClusterId = 0x3e, |
| [1659415377.222125][2666:2671] CHIP:DMG: CommandId = 0x3, |
| [1659415377.222216][2666:2671] CHIP:DMG: }, |
| [1659415377.222303][2666:2671] CHIP:DMG: |
| [1659415377.222377][2666:2671] CHIP:DMG: CommandFields = |
| [1659415377.222476][2666:2671] CHIP:DMG: { |
| [1659415377.222570][2666:2671] CHIP:DMG: 0x0 = [ |
| [1659415377.222896][2666:2671] CHIP:DMG: 0x30, 0x82, 0x1, 0xcb, 0x30, 0x82, 0x1, 0x71, 0xa0, 0x3, 0x2, 0x1, 0x2, 0x2, 0x8, 0x56, 0xad, 0x82, 0x22, 0xad, 0x94, 0x5b, 0x64, 0x30, 0xa, 0x6, 0x8, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x4, 0x3, 0x2, 0x30, 0x30, 0x31, 0x18, 0x30, 0x16, 0x6, 0x3, 0x55, 0x4, 0x3, 0xc, 0xf, 0x4d, 0x61, 0x74, 0x74, 0x65, 0x72, 0x20, 0x54, 0x65, 0x73, 0x74, 0x20, 0x50, 0x41, 0x41, 0x31, 0x14, 0x30, 0x12, 0x6, 0xa, 0x2b, 0x6, 0x1, 0x4, 0x1, 0x82, 0xa2, 0x7c, 0x2, 0x1, 0xc, 0x4, 0x46, 0x46, 0x46, 0x31, 0x30, 0x20, 0x17, 0xd, 0x32, 0x32, 0x30, 0x32, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x5a, 0x18, 0xf, 0x39, 0x39, 0x39, 0x39, 0x31, 0x32, 0x33, 0x31, 0x32, 0x33, 0x35, 0x39, 0x35, 0x39, 0x5a, 0x30, 0x3d, 0x31, 0x25, 0x30, 0x23, 0x6, 0x3, 0x55, 0x4, 0x3, 0xc, 0x1c, 0x4d, 0x61, 0x74, 0x74, 0x65, 0x72, 0x20, 0x44, 0x65, 0x76, 0x20, 0x50, 0x41, 0x49, 0x20, 0x30, 0x78, 0x46, 0x46, 0x46, 0x31, 0x20, 0x6e, 0x6f, 0x20, 0x50, 0x49, 0x44, 0x31, 0x14, 0x30, 0x12, 0x6, 0xa, 0x2b, 0x6, 0x1, 0x4, 0x1, 0x82, 0xa2, 0x7c, 0x2, 0x1, 0xc, 0x4, 0x46, 0x46, 0x46, 0x31, 0x30, 0x59, 0x30, 0x13, 0x6, 0x7, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x2, 0x1, 0x6, 0x8, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x3, 0x1, 0x7, 0x3, 0x42, 0x0, 0x4, 0x41, 0x9a, 0x93, 0x15, 0xc2, 0x17, 0x3e, 0xc, 0x8c, 0x87, 0x6d, 0x3, 0xcc, 0xfc, 0x94, 0x48, 0x52, 0x64, 0x7f, 0x7f, 0xec, 0x5e, 0x50, 0x82, 0xf4, 0x5, 0x99, 0x28, 0xec, 0xa8, 0x94, 0xc5, 0x94, 0x15, 0x13, 0x9, 0xac, 0x63, 0x1e, 0x4c, 0xb0, 0x33, 0x92, 0xaf, 0x68, 0x4b, 0xb, 0xaf, 0xb7, 0xe6, 0x5b, 0x3b, 0x81, 0x62, 0xc2, 0xf5, 0x2b, 0xf9, 0x31, 0xb8, 0xe7, 0x7a, 0xaa, 0x82, 0xa3, 0x66, 0x30, 0x64, 0x30, 0x12, 0x6, 0x3, 0x55, 0x1d, 0x13, 0x1, 0x1, 0xff, 0x4, 0x8, 0x30, 0x6, 0x1, 0x1, 0xff, 0x2, 0x1, |
| [1659415377.223073][2666:2671] CHIP:DMG: ] (463 bytes) |
| [1659415377.223156][2666:2671] CHIP:DMG: }, |
| [1659415377.223230][2666:2671] CHIP:DMG: }, |
| [1659415377.223312][2666:2671] CHIP:DMG: |
| [1659415377.223374][2666:2671] CHIP:DMG: }, |
| [1659415377.223448][2666:2671] CHIP:DMG: |
| [1659415377.223505][2666:2671] CHIP:DMG: ], |
| [1659415377.223579][2666:2671] CHIP:DMG: |
| [1659415377.223637][2666:2671] CHIP:DMG: InteractionModelRevision = 1 |
| [1659415377.223694][2666:2671] CHIP:DMG: }, |
| [1659415377.223832][2666:2671] CHIP:DMG: Received Command Response Data, Endpoint=0 Cluster=0x0000_003E Command=0x0000_0003 |
| [1659415377.223908][2666:2671] CHIP:CTL: Received certificate chain from the device |
| [1659415377.224018][2666:2671] CHIP:CTL: Successfully finished commissioning step "SendPAICertificateRequest" |
| |
| |
| 1. Save the PAI value from commissioning log of TH in the file as below |
| vi pai_6.pem |
| |
| 2. Give the below command to extract the Authority key ID |
| openssl x509 -in pai_6.pem -text |
| |
| Verify that below extracted authority key is not same as the SDK"s test PAA |
| 1. 78:5C:E7:05:B8:6B:8F:4E:6F:C7:93:AA:60:CB:43:EA:69:68:82:D5 |
| 2. 6A:FD:22:77:1F:51:1F:EC:BF:16:41:97:67:10:DC:DC:31:A1:71:7E |
| |
| Below certificate has been extracted using the sample DUT, hence the Authority key ID is same as SDK"s test PAA |
| |
| grl@grl-ThinkPad-L480:~/jul14_2ndcntrl/connectedhomeip$ openssl x509 -in pai_6.pem -text |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: 4498223361705918669 (0x3e6ce6509ad840cd) |
| Signature Algorithm: ecdsa-with-SHA256 |
| Issuer: CN = Matter Test PAA, 1.3.6.1.4.1.37244.2.1 = FFF1 |
| Validity |
| Not Before: Jun 28 14:23:43 2021 GMT |
| Not After : Dec 31 23:59:59 9999 GMT |
| Subject: CN = Matter Test PAI, 1.3.6.1.4.1.37244.2.1 = FFF1, 1.3.6.1.4.1.37244.2.2 = 8000 |
| Subject Public Key Info: |
| Public Key Algorithm: id-ecPublicKey |
| Public-Key: (256 bit) |
| pub: |
| 04:80:dd:f1:1b:22:8f:3e:31:f6:3b:cf:57:98:da: |
| 14:62:3a:eb:bd:e8:2e:f3:78:ee:ad:bf:b1:8f:e1: |
| ab:ce:31:d0:8e:d4:b2:06:04:b6:cc:c6:d9:b5:fa: |
| b6:4e:7d:e1:0c:b7:4b:e0:17:c9:ec:15:16:05:6d: |
| 70:f2:cd:0b:22 |
| ASN1 OID: prime256v1 |
| NIST CURVE: P-256 |
| X509v3 extensions: |
| X509v3 Basic Constraints: critical |
| CA:TRUE, pathlen:0 |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Subject Key Identifier: |
| AF:42:B7:09:4D:EB:D5:15:EC:6E:CF:33:B8:11:15:22:5F:32:52:88 |
| X509v3 Authority Key Identifier: |
| keyid:6A:FD:22:77:1F:51:1F:EC:BF:16:41:97:67:10:DC:DC:31:A1:71:7E |
| |
| Signature Algorithm: ecdsa-with-SHA256 |
| 30:45:02:21:00:96:c9:c8:cf:2e:01:88:60:05:d8:f5:bc:72: |
| c0:7b:75:fd:9a:57:69:5a:c4:91:11:31:13:8b:ea:03:3c:e5: |
| 03:02:20:25:54:94:3b:e5:7d:53:d6:c4:75:f7:d2:3e:bf:cf: |
| c2:03:6c:d2:9b:a6:39:3e:c7:ef:ad:87:14:ab:71:82:19 |
| -----BEGIN CERTIFICATE----- |
| MIIB1DCCAXqgAwIBAgIIPmzmUJrYQM0wCgYIKoZIzj0EAwIwMDEYMBYGA1UEAwwP |
| TWF0dGVyIFRlc3QgUEFBMRQwEgYKKwYBBAGConwCAQwERkZGMTAgFw0yMTA2Mjgx |
| NDIzNDNaGA85OTk5MTIzMTIzNTk1OVowRjEYMBYGA1UEAwwPTWF0dGVyIFRlc3Qg |
| UEFJMRQwEgYKKwYBBAGConwCAQwERkZGMTEUMBIGCisGAQQBgqJ8AgIMBDgwMDAw |
| WTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAASA3fEbIo8+MfY7z1eY2hRiOuu96C7z |
| eO6tv7GP4avOMdCO1LIGBLbMxtm1+rZOfeEMt0vgF8nsFRYFbXDyzQsio2YwZDAS |
| BgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUr0K3 |
| CU3r1RXsbs8zuBEVIl8yUogwHwYDVR0jBBgwFoAUav0idx9RH+y/FkGXZxDc3DGh |
| cX4wCgYIKoZIzj0EAwIDSAAwRQIhAJbJyM8uAYhgBdj1vHLAe3X9mldpWsSRETET |
| i+oDPOUDAiAlVJQ75X1T1sR199I+v8/CA2zSm6Y5PsfvrYcUq3GCGQ== |
| -----END CERTIFICATE----- |
| disabled: true |
| |
| - label: "TH extracts the public key from the DAC and saves as pk_1" |
| verification: | |
| During commissioning we will get DAC certificate, see on TH(chip-tool) log: |
| |
| [1659509320.714103][3165:3170] CHIP:CTL: Performing next commissioning step "SendDACCertificateRequest" |
| [1659509320.714155][3165:3170] CHIP:CTL: Sending request for DAC certificate |
| [1659509320.714225][3165:3170] CHIP:CTL: Sending Certificate Chain request to 0xffff74000b60 device |
| [1659509320.714397][3165:3170] CHIP:DMG: ICR moving to [AddingComm] |
| [1659509320.714470][3165:3170] CHIP:DMG: ICR moving to [AddedComma] |
| [1659509320.715027][3165:3170] CHIP:IN: Prepared secure message 0xffff74001d38 to 0xFFFFFFFB00000000 (0) of type 0x8 and protocolId (0, 1) on exchange 17089i with MessageCounter:86888459. |
| [1659509320.715128][3165:3170] CHIP:IN: Sending encrypted msg 0xffff74001d38 with MessageCounter:86888459 to 0xFFFFFFFB00000000 (0) at monotonic time: 0000000000ADAD48 msec |
| [1659509320.715804][3165:3170] CHIP:DMG: >> to UDP:[fe80::e65f:1ff:fe0f:2753%eth0]:5540 | 86888459 | [Interaction Model (1) / InvokeCommandRequest (0x08) / Session = 29587 / Exchange = 17089] |
| [1659509320.715898][3165:3170] CHIP:DMG: Header Flags = |
| [1659509320.715952][3165:3170] CHIP:DMG: { |
| [1659509320.716035][3165:3170] CHIP:DMG: Exchange (0x05) = |
| [1659509320.716089][3165:3170] CHIP:DMG: { |
| [1659509320.716158][3165:3170] CHIP:DMG: Initiator = true |
| [1659509320.716212][3165:3170] CHIP:DMG: NeedsAck = true |
| [1659509320.716264][3165:3170] CHIP:DMG: } |
| [1659509320.716353][3165:3170] CHIP:DMG: } |
| [1659509320.716405][3165:3170] CHIP:DMG: |
| [1659509320.716491][3165:3170] CHIP:DMG: Encrypted Payload (62 bytes) = |
| [1659509320.716544][3165:3170] CHIP:DMG: { |
| [1659509320.716616][3165:3170] CHIP:DMG: data = 009373000bd02d05c296dbc864194390f3d020eb61ee335c0d61263dd0d5f4849a5c6a601f73c80e6775d2b422e816cf8e3ae224d59c01f53783a657bd0d |
| [1659509320.716672][3165:3170] CHIP:DMG: buffer_ptr = 281472627949680 |
| [1659509320.716742][3165:3170] CHIP:DMG: } |
| [1659509320.716793][3165:3170] CHIP:DMG: |
| [1659509320.716965][3165:3170] CHIP:DMG: InvokeRequestMessage = |
| [1659509320.717029][3165:3170] CHIP:DMG: { |
| [1659509320.717084][3165:3170] CHIP:DMG: suppressResponse = false, |
| [1659509320.717148][3165:3170] CHIP:DMG: timedRequest = false, |
| [1659509320.717206][3165:3170] CHIP:DMG: InvokeRequests = |
| [1659509320.717276][3165:3170] CHIP:DMG: [ |
| [1659509320.717335][3165:3170] CHIP:DMG: CommandDataIB = |
| [1659509320.717399][3165:3170] CHIP:DMG: { |
| [1659509320.717461][3165:3170] CHIP:DMG: CommandPathIB = |
| [1659509320.717535][3165:3170] CHIP:DMG: { |
| [1659509320.717788][3165:3170] CHIP:DMG: EndpointId = 0x0, |
| [1659509320.717870][3165:3170] CHIP:DMG: ClusterId = 0x3e, |
| [1659509320.717947][3165:3170] CHIP:DMG: CommandId = 0x2, |
| [1659509320.718019][3165:3170] CHIP:DMG: }, |
| [1659509320.718116][3165:3170] CHIP:DMG: |
| [1659509320.718181][3165:3170] CHIP:DMG: CommandFields = |
| [1659509320.718273][3165:3170] CHIP:DMG: { |
| [1659509320.718436][3165:3170] CHIP:DMG: 0x0 = 1, |
| [1659509320.718521][3165:3170] CHIP:DMG: }, |
| [1659509320.718609][3165:3170] CHIP:DMG: }, |
| [1659509320.718706][3165:3170] CHIP:DMG: |
| [1659509320.718766][3165:3170] CHIP:DMG: ], |
| [1659509320.718855][3165:3170] CHIP:DMG: |
| [1659509320.718915][3165:3170] CHIP:DMG: InteractionModelRevision = 1 |
| [1659509320.718971][3165:3170] CHIP:DMG: }, |
| [1659509320.719024][3165:3170] CHIP:DMG: |
| [1659509320.719407][3165:3170] CHIP:DMG: ICR moving to [CommandSen] |
| [1659509320.719536][3165:3170] CHIP:DMG: ICR moving to [AwaitingDe] |
| [1659509320.719608][3165:3170] CHIP:EM: Sending Standalone Ack for MessageCounter:148943591 on exchange 17088i |
| [1659509320.720332][3165:3170] CHIP:IN: Prepared secure message 0xffff88e5c9e8 to 0xFFFFFFFB00000000 (0) of type 0x10 and protocolId (0, 0) on exchange 17088i with MessageCounter:86888460. |
| [1659509320.720493][3165:3170] CHIP:IN: Sending encrypted msg 0xffff88e5c9e8 with MessageCounter:86888460 to 0xFFFFFFFB00000000 (0) at monotonic time: 0000000000ADAD4E msec |
| [1659509320.721152][3165:3170] CHIP:DMG: >> to UDP:[fe80::e65f:1ff:fe0f:2753%eth0]:5540 | 86888460 | [Secure Channel (0) / Standalone Ack (0x10) / Session = 29587 / Exchange = 17088] |
| [1659509320.721242][3165:3170] CHIP:DMG: Header Flags = |
| [1659509320.721298][3165:3170] CHIP:DMG: { |
| [1659509320.721381][3165:3170] CHIP:DMG: Exchange (0x03) = |
| [1659509320.721434][3165:3170] CHIP:DMG: { |
| [1659509320.721505][3165:3170] CHIP:DMG: Initiator = true |
| [1659509320.721562][3165:3170] CHIP:DMG: AckMsg = 148943591 |
| [1659509320.721634][3165:3170] CHIP:DMG: } |
| [1659509320.721706][3165:3170] CHIP:DMG: } |
| [1659509320.721759][3165:3170] CHIP:DMG: |
| [1659509320.721846][3165:3170] CHIP:DMG: Encrypted Payload (34 bytes) = |
| [1659509320.721901][3165:3170] CHIP:DMG: { |
| [1659509320.721972][3165:3170] CHIP:DMG: data = 009373000cd02d05ff4214e467b1c7a3664b8d8c5628c4e291f833b9f2f35d953235 |
| [1659509320.722027][3165:3170] CHIP:DMG: buffer_ptr = 281472627939824 |
| [1659509320.722077][3165:3170] CHIP:DMG: } |
| [1659509320.722125][3165:3170] CHIP:DMG: |
| [1659509320.722485][3165:3170] CHIP:EM: Flushed pending ack for MessageCounter:148943591 on exchange 17088i |
| [1659509320.724260][3165:3170] CHIP:DMG: << from UDP:[fe80::e65f:1ff:fe0f:2753%eth0]:5540 | 148943592 | [Interaction Model (1) / InvokeCommandResponse (0x09) / Session = 49327 / Exchange = 17089] |
| [1659509320.724362][3165:3170] CHIP:DMG: Header Flags = |
| [1659509320.724417][3165:3170] CHIP:DMG: { |
| [1659509320.724503][3165:3170] CHIP:DMG: Exchange (0x06) = |
| [1659509320.724558][3165:3170] CHIP:DMG: { |
| [1659509320.724647][3165:3170] CHIP:DMG: AckMsg = 86888459 |
| [1659509320.724704][3165:3170] CHIP:DMG: NeedsAck = true |
| [1659509320.724756][3165:3170] CHIP:DMG: } |
| [1659509320.724827][3165:3170] CHIP:DMG: } |
| [1659509320.724879][3165:3170] CHIP:DMG: |
| [1659509320.724950][3165:3170] CHIP:DMG: Encrypted Payload (559 bytes) = |
| [1659509320.725003][3165:3170] CHIP:DMG: { |
| [1659509320.725056][3165:3170] CHIP:DMG: data = 00afc000e8b2e008b40e7ea031654ba52d0e71f9a877ec233377ef9eef00611412271b31992e30753df53f0bfac6b5f9a30217f67d03a17653c5ee991a0266f3ef286188e3f977d3dd94fbbb60323a74c2b685309d607af14c0b4c7214c7579cf43e9ed90d4256382e5d40bc46796e06fdb6b220bbc5e7b6fc812f2c5bc357fcbda79d6dcb464f42d04ab1708fdfb5ea8b90c3720257e9da78ba877b24b99d7f104c4ee199923c876d8c07903beab5f93a784f226d1e82f8d5f001f23457965c9ddbcc8661d00b7202a9932b1ae92ff36d80b8e5ac2d18d65e8a3957486ef86ca4f056218677958f9be17ab6c54d3dedb7e88a144ef607f692d3131276dbb2803e6e93dc5d330ef13b0e00289e6a9186e1f1c0e5b9615ace2c1d544f4b6bc58f700b47a11fc2278977b2a1595c96532daefe44db899e3f75f473ffbf4ac1e93ba76033dfa562beedf4b9a5fe9b985e6a0227efdcf5ced1b966bd78addb1ad5950c6378dc149a6372888683a8539a4d59958c7460b1968b0d8dcfa2d3660dc07c4e0e44095ef14c4cdd249727caad086e8630f9df296d8fa426f01f58f532ac1a91cb1da874055711edd4f13c722a0e66f850d0f455c09fbc2c049852ec936545b2bf2798f9c614e4488707a1f38fee8c08fe3c886fd89d9e3578fad68077133c7e086d5ba7df2a7323d10f03602d46c1e172e993fd3b6d5d468b7da8dc315711d53ded3ab7f38f7517f23394c7c9438ce5726449cca510956add995f76140fe3bd0a63ea024058898635373e68e9e3 |
| [1659509320.725163][3165:3170] CHIP:DMG: buffer_ptr = 281472627931376 |
| [1659509320.725214][3165:3170] CHIP:DMG: } |
| [1659509320.725263][3165:3170] CHIP:DMG: |
| [1659509320.725501][3165:3170] CHIP:DMG: DAC/PAI (491) = |
| [1659509320.725616][3165:3170] CHIP:DMG: { |
| -----BEGIN CERTIFICATE----- |
| MIIB5zCCAY6gAwIBAgIIac3xDenlTtEwCgYIKoZIzj0EAwIwPTElMCMGA1UEAwwc |
| TWF0dGVyIERldiBQQUkgMHhGRkYxIG5vIFBJRDEUMBIGCisGAQQBgqJ8AgEMBEZG |
| RjEwIBcNMjIwMjA1MDAwMDAwWhgPOTk5OTEyMzEyMzU5NTlaMFMxJTAjBgNVBAMM |
| HE1hdHRlciBEZXYgREFDIDB4RkZGMS8weDgwMDExFDASBgorBgEEAYKifAIBDARG |
| RkYxMRQwEgYKKwYBBAGConwCAgwEODAwMTBZMBMGByqGSM49AgEGCCqGSM49AwEH |
| A0IABEY6xpNCkQoOVYj8b/Vrtj5i7M7LFI99TrA+5VJgFBV2fRalxmP3k+SRIyYL |
| gpenzX58/HsxaznZjpDSk3dzjoKjYDBeMAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/ |
| BAQDAgeAMB0GA1UdDgQWBBSI3eezADgpMs/3NMBGJIEPRBaKbzAfBgNVHSMEGDAW |
| gBRjVA5H9kscONE4hKRi0WwZXY/7PDAKBggqhkjOPQQDAgNHADBEAiABJ6J7S0Rh |
| DuL83E0reIVWNmC8D3bxchntagjfsrPBzQIga1ngr0Xz6yqFuRnTVzFSjGAoxBUj |
| lUXhCOTlTnCXE1M= |
| -----END CERTIFICATE----- |
| [1659509320.725847][3165:3170] CHIP:DMG: } |
| [1659509320.725898][3165:3170] CHIP:DMG: |
| [1659509320.725961][3165:3170] CHIP:DMG: |
| [1659509320.726043][3165:3170] CHIP:DMG: Additional Fields = |
| [1659509320.726099][3165:3170] CHIP:DMG: { |
| [1659509320.726158][3165:3170] CHIP:DMG: peer_address = UDP:[fe80::e65f:1ff:fe0f:2753%eth0]:5540 |
| [1659509320.726215][3165:3170] CHIP:DMG: } |
| [1659509320.726265][3165:3170] CHIP:DMG: |
| [1659509320.726334][3165:3170] CHIP:EM: Received message of type 0x9 with protocolId (0, 1) and MessageCounter:148943592 on exchange 17089i |
| [1659509320.726446][3165:3170] CHIP:EM: Found matching exchange: 17089i, Delegate: 0xffff74009c78 |
| [1659509320.726534][3165:3170] CHIP:EM: Rxd Ack; Removing MessageCounter:86888459 from Retrans Table on exchange 17089i |
| [1659509320.726594][3165:3170] CHIP:EM: Removed CHIP MessageCounter:86888459 from RetransTable on exchange 17089i |
| [1659509320.726669][3165:3170] CHIP:DMG: ICR moving to [ResponseRe] |
| [1659509320.726761][3165:3170] CHIP:DMG: InvokeResponseMessage = |
| [1659509320.726818][3165:3170] CHIP:DMG: { |
| [1659509320.726876][3165:3170] CHIP:DMG: suppressResponse = false, |
| [1659509320.726934][3165:3170] CHIP:DMG: InvokeResponseIBs = |
| [1659509320.727010][3165:3170] CHIP:DMG: [ |
| [1659509320.727068][3165:3170] CHIP:DMG: InvokeResponseIB = |
| [1659509320.727154][3165:3170] CHIP:DMG: { |
| [1659509320.727217][3165:3170] CHIP:DMG: CommandDataIB = |
| [1659509320.727291][3165:3170] CHIP:DMG: { |
| [1659509320.727362][3165:3170] CHIP:DMG: CommandPathIB = |
| [1659509320.727442][3165:3170] CHIP:DMG: { |
| [1659509320.727523][3165:3170] CHIP:DMG: EndpointId = 0x0, |
| [1659509320.727607][3165:3170] CHIP:DMG: ClusterId = 0x3e, |
| [1659509320.727698][3165:3170] CHIP:DMG: CommandId = 0x3, |
| [1659509320.727777][3165:3170] CHIP:DMG: }, |
| [1659509320.727857][3165:3170] CHIP:DMG: |
| [1659509320.727928][3165:3170] CHIP:DMG: CommandFields = |
| [1659509320.728004][3165:3170] CHIP:DMG: { |
| [1659509320.728081][3165:3170] CHIP:DMG: 0x0 = [ |
| [1659509320.728404][3165:3170] CHIP:DMG: 0x30, 0x82, 0x1, 0xe7, 0x30, 0x82, 0x1, 0x8e, 0xa0, 0x3, 0x2, 0x1, 0x2, 0x2, 0x8, 0x69, 0xcd, 0xf1, 0xd, 0xe9, 0xe5, 0x4e, 0xd1, 0x30, 0xa, 0x6, 0x8, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x4, 0x3, 0x2, 0x30, 0x3d, 0x31, 0x25, 0x30, 0x23, 0x6, 0x3, 0x55, 0x4, 0x3, 0xc, 0x1c, 0x4d, 0x61, 0x74, 0x74, 0x65, 0x72, 0x20, 0x44, 0x65, 0x76, 0x20, 0x50, 0x41, 0x49, 0x20, 0x30, 0x78, 0x46, 0x46, 0x46, 0x31, 0x20, 0x6e, 0x6f, 0x20, 0x50, 0x49, 0x44, 0x31, 0x14, 0x30, 0x12, 0x6, 0xa, 0x2b, 0x6, 0x1, 0x4, 0x1, 0x82, 0xa2, 0x7c, 0x2, 0x1, 0xc, 0x4, 0x46, 0x46, 0x46, 0x31, 0x30, 0x20, 0x17, 0xd, 0x32, 0x32, 0x30, 0x32, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x5a, 0x18, 0xf, 0x39, 0x39, 0x39, 0x39, 0x31, 0x32, 0x33, 0x31, 0x32, 0x33, 0x35, 0x39, 0x35, 0x39, 0x5a, 0x30, 0x53, 0x31, 0x25, 0x30, 0x23, 0x6, 0x3, 0x55, 0x4, 0x3, 0xc, 0x1c, 0x4d, 0x61, 0x74, 0x74, 0x65, 0x72, 0x20, 0x44, 0x65, 0x76, 0x20, 0x44, 0x41, 0x43, 0x20, 0x30, 0x78, 0x46, 0x46, 0x46, 0x31, 0x2f, 0x30, 0x78, 0x38, 0x30, 0x30, 0x31, 0x31, 0x14, 0x30, 0x12, 0x6, 0xa, 0x2b, 0x6, 0x1, 0x4, 0x1, 0x82, 0xa2, 0x7c, 0x2, 0x1, 0xc, 0x4, 0x46, 0x46, 0x46, 0x31, 0x31, 0x14, 0x30, 0x12, 0x6, 0xa, 0x2b, 0x6, 0x1, 0x4, 0x1, 0x82, 0xa2, 0x7c, 0x2, 0x2, 0xc, 0x4, 0x38, 0x30, 0x30, 0x31, 0x30, 0x59, 0x30, 0x13, 0x6, 0x7, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x2, 0x1, 0x6, 0x8, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x3, 0x1, 0x7, 0x3, 0x42, 0x0, 0x4, 0x46, 0x3a, 0xc6, 0x93, 0x42, 0x91, 0xa, 0xe, 0x55, 0x88, 0xfc, 0x6f, 0xf5, 0x6b, 0xb6, 0x3e, 0x62, 0xec, 0xce, 0xcb, 0x14, 0x8f, 0x7d, 0x4e, 0xb0, 0x3e, 0xe5, 0x52, 0x60, 0x14, 0x15, 0x76, 0x7d, 0x16, 0xa5, 0xc6, 0x63, 0xf7, 0x93, 0xe4, 0x91, 0x23, 0x26, 0xb, 0x82, 0x97, 0xa7, 0xcd, 0x7e, 0x7c, 0xfc, 0x |
| [1659509320.728579][3165:3170] CHIP:DMG: ] (491 bytes) |
| [1659509320.728664][3165:3170] CHIP:DMG: }, |
| [1659509320.728738][3165:3170] CHIP:DMG: }, |
| [1659509320.728818][3165:3170] CHIP:DMG: |
| [1659509320.728879][3165:3170] CHIP:DMG: }, |
| [1659509320.728952][3165:3170] CHIP:DMG: |
| [1659509320.729010][3165:3170] CHIP:DMG: ], |
| [1659509320.729082][3165:3170] CHIP:DMG: |
| [1659509320.729140][3165:3170] CHIP:DMG: InteractionModelRevision = 1 |
| [1659509320.729197][3165:3170] CHIP:DMG: }, |
| [1659509320.729335][3165:3170] CHIP:DMG: Received Command Response Data, Endpoint=0 Cluster=0x0000_003E Command=0x0000_0003 |
| [1659509320.729409][3165:3170] CHIP:CTL: Received certificate chain from the device |
| [1659509320.729476][3165:3170] CHIP:CTL: Successfully finished commissioning step "SendDACCertificateRequest" |
| |
| |
| |
| |
| |
| "1. Save the DAC value from commissioning log of TH in the file as below |
| vi dac.pem |
| |
| 2. Give the below command to extract the Authority key ID |
| openssl x509 -in dac.pem -text |
| |
| Below certificate has been extracted using the sample DUT, hence the Authority key ID is same as SDK"s test PAA |
| |
| grl@grl-ThinkPad-L480:~/jul14_2ndcntrl/connectedhomeip$ openssl x509 -in dac.pem -text |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: 7624014786269105873 (0x69cdf10de9e54ed1) |
| Signature Algorithm: ecdsa-with-SHA256 |
| Issuer: CN = Matter Dev PAI 0xFFF1 no PID, 1.3.6.1.4.1.37244.2.1 = FFF1 |
| Validity |
| Not Before: Feb 5 00:00:00 2022 GMT |
| Not After : Dec 31 23:59:59 9999 GMT |
| Subject: CN = Matter Dev DAC 0xFFF1/0x8001, 1.3.6.1.4.1.37244.2.1 = FFF1, 1.3.6.1.4.1.37244.2.2 = 8001 |
| Subject Public Key Info: |
| Public Key Algorithm: id-ecPublicKey |
| Public-Key: (256 bit) |
| pub: |
| 04:46:3a:c6:93:42:91:0a:0e:55:88:fc:6f:f5:6b: |
| b6:3e:62:ec:ce:cb:14:8f:7d:4e:b0:3e:e5:52:60: |
| 14:15:76:7d:16:a5:c6:63:f7:93:e4:91:23:26:0b: |
| 82:97:a7:cd:7e:7c:fc:7b:31:6b:39:d9:8e:90:d2: |
| 93:77:73:8e:82 |
| ASN1 OID: prime256v1 |
| NIST CURVE: P-256 |
| X509v3 extensions: |
| X509v3 Basic Constraints: critical |
| CA:FALSE |
| X509v3 Key Usage: critical |
| Digital Signature |
| X509v3 Subject Key Identifier: |
| 88:DD:E7:B3:00:38:29:32:CF:F7:34:C0:46:24:81:0F:44:16:8A:6F |
| X509v3 Authority Key Identifier: |
| keyid:63:54:0E:47:F6:4B:1C:38:D1:38:84:A4:62:D1:6C:19:5D:8F:FB:3C |
| |
| Signature Algorithm: ecdsa-with-SHA256 |
| 30:44:02:20:01:27:a2:7b:4b:44:61:0e:e2:fc:dc:4d:2b:78: |
| 85:56:36:60:bc:0f:76:f1:72:19:ed:6a:08:df:b2:b3:c1:cd: |
| 02:20:6b:59:e0:af:45:f3:eb:2a:85:b9:19:d3:57:31:52:8c: |
| 60:28:c4:15:23:95:45:e1:08:e4:e5:4e:70:97:13:53 |
| -----BEGIN CERTIFICATE----- |
| MIIB5zCCAY6gAwIBAgIIac3xDenlTtEwCgYIKoZIzj0EAwIwPTElMCMGA1UEAwwc |
| TWF0dGVyIERldiBQQUkgMHhGRkYxIG5vIFBJRDEUMBIGCisGAQQBgqJ8AgEMBEZG |
| RjEwIBcNMjIwMjA1MDAwMDAwWhgPOTk5OTEyMzEyMzU5NTlaMFMxJTAjBgNVBAMM |
| HE1hdHRlciBEZXYgREFDIDB4RkZGMS8weDgwMDExFDASBgorBgEEAYKifAIBDARG |
| RkYxMRQwEgYKKwYBBAGConwCAgwEODAwMTBZMBMGByqGSM49AgEGCCqGSM49AwEH |
| A0IABEY6xpNCkQoOVYj8b/Vrtj5i7M7LFI99TrA+5VJgFBV2fRalxmP3k+SRIyYL |
| gpenzX58/HsxaznZjpDSk3dzjoKjYDBeMAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/ |
| BAQDAgeAMB0GA1UdDgQWBBSI3eezADgpMs/3NMBGJIEPRBaKbzAfBgNVHSMEGDAW |
| gBRjVA5H9kscONE4hKRi0WwZXY/7PDAKBggqhkjOPQQDAgNHADBEAiABJ6J7S0Rh |
| DuL83E0reIVWNmC8D3bxchntagjfsrPBzQIga1ngr0Xz6yqFuRnTVzFSjGAoxBUj |
| lUXhCOTlTnCXE1M= |
| -----END CERTIFICATE----- |
| disabled: true |
| |
| - label: |
| "Repeat Step 1 to 4 with DUT2, saving the PAI, DAC and public key as |
| pk_2" |
| verification: | |
| To commission DUT2 to TH |
| |
| "sudo ./chip-all-clusters-app --wifi --discriminator 3844 |
| |
| TH side: |
| ./chip-tool pairing ble-wifi 1 zigbeehome matter123 20202021 3844 --trace_decode 1 |
| |
| [1650455358.501816][4366:4371] CHIP:TOO: Device commissioning completed with success" |
| |
| |
| Verify in TH(chip-tool) log: |
| |
| ./chip-tool operationalcredentials certificate-chain-request 1 1 0 --trace_decode 1 |
| [1657774717.721972][7956:7961] CHIP:DMG: Received Command Response Data, Endpoint=0 Cluster=0x0000_003E Command=0x0000_0003 |
| [1657774717.722019][7956:7961] CHIP:TOO: Endpoint: 0 Cluster: 0x0000_003E Command 0x0000_0003 |
| [1657774717.722135][7956:7961] CHIP:TOO: CertificateChainResponse: { |
| [1657774717.722181][7956:7961] CHIP:TOO: certificate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|
| [1657774717.722269][7956:7961] CHIP:TOO: ...........: 034700304402200127A27B4B44610EE2FCDC4D2B7885563660BC0F76F17219ED6A08DFB2B3C1CD02206B59E0AF45F3EB2A85B919D35731528C6028C415239545E108E4E54E70971353 |
| [1657774717.722297][7956:7961] CHIP:TOO: } |
| |
| |
| |
| ./chip-tool operationalcredentials certificate-chain-request 2 1 0 --trace_decode 1 |
| |
| [1657774756.281112][7964:7969] CHIP:DMG: Received Command Response Data, Endpoint=0 Cluster=0x0000_003E Command=0x0000_0003 |
| [1657774756.281164][7964:7969] CHIP:TOO: Endpoint: 0 Cluster: 0x0000_003E Command 0x0000_0003 |
| [1657774756.281236][7964:7969] CHIP:TOO: CertificateChainResponse: { |
| [1657774756.281289][7964:7969] CHIP:TOO: certificate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|
| [1657774756.281357][7964:7969] CHIP:TOO: ...........: B88FACE529368D12054C0C0220655DC92B86BD909882A6C62177B825D7D05EDBE7C22F9FEA71220E7EA703F891 |
| [1657774756.281388][7964:7969] CHIP:TOO: } |
| |
| |
| During commissioning we will get PAI certificate, see on TH(chip-tool) log: |
| |
| [1659415376.883870][2666:2671] CHIP:CTL: Performing next commissioning step "SendPAICertificateRequest" |
| [1659415376.883925][2666:2671] CHIP:CTL: Sending request for PAI certificate |
| [1659415376.884015][2666:2671] CHIP:CTL: Sending Certificate Chain request to 0xffffa0000b60 device |
| [1659415376.884167][2666:2671] CHIP:DMG: ICR moving to [AddingComm] |
| [1659415376.884302][2666:2671] CHIP:DMG: ICR moving to [AddedComma] |
| [1659415376.884867][2666:2671] CHIP:IN: Prepared secure message 0xffffb37ec8d8 to 0xFFFFFFFB00000000 (0) of type 0x8 and protocolId (0, 1) on exchange 61632i with MessageCounter:72933899. |
| [1659415376.884965][2666:2671] CHIP:IN: Sending encrypted msg 0xffffb37ec8d8 with MessageCounter:72933899 to 0xFFFFFFFB00000000 (0) at monotonic time: 0000000000161D55 msec |
| [1659415376.885796][2666:2671] CHIP:DMG: >> to BLE | 72933899 | [Interaction Model (1) / InvokeCommandRequest (0x08) / Session = 384 / Exchange = 61632] |
| [1659415376.885890][2666:2671] CHIP:DMG: Header Flags = |
| [1659415376.885944][2666:2671] CHIP:DMG: { |
| [1659415376.886028][2666:2671] CHIP:DMG: Exchange (0x01) = |
| [1659415376.886081][2666:2671] CHIP:DMG: { |
| [1659415376.886154][2666:2671] CHIP:DMG: Initiator = true |
| [1659415376.886206][2666:2671] CHIP:DMG: } |
| [1659415376.886296][2666:2671] CHIP:DMG: } |
| [1659415376.886350][2666:2671] CHIP:DMG: |
| [1659415376.886438][2666:2671] CHIP:DMG: Encrypted Payload (62 bytes) = |
| [1659415376.886492][2666:2671] CHIP:DMG: { |
| [1659415376.886542][2666:2671] CHIP:DMG: data = 008001000be258046e751fb56b97dabcc7ee6b6611ede33a66461e188834bb1fe5b6332edb4a3896d32bce2eb59dee722e070c4426af77c82dfca14619bb |
| [1659415376.886616][2666:2671] CHIP:DMG: buffer_ptr = 281473366182720 |
| [1659415376.886666][2666:2671] CHIP:DMG: } |
| [1659415376.886714][2666:2671] CHIP:DMG: |
| [1659415376.886900][2666:2671] CHIP:DMG: InvokeRequestMessage = |
| [1659415376.886962][2666:2671] CHIP:DMG: { |
| [1659415376.887039][2666:2671] CHIP:DMG: suppressResponse = false, |
| [1659415376.887103][2666:2671] CHIP:DMG: timedRequest = false, |
| [1659415376.887162][2666:2671] CHIP:DMG: InvokeRequests = |
| [1659415376.887234][2666:2671] CHIP:DMG: [ |
| [1659415376.887312][2666:2671] CHIP:DMG: CommandDataIB = |
| [1659415376.887380][2666:2671] CHIP:DMG: { |
| [1659415376.887442][2666:2671] CHIP:DMG: CommandPathIB = |
| [1659415376.887538][2666:2671] CHIP:DMG: { |
| [1659415376.887633][2666:2671] CHIP:DMG: EndpointId = 0x0, |
| [1659415376.887874][2666:2671] CHIP:DMG: ClusterId = 0x3e, |
| [1659415376.888039][2666:2671] CHIP:DMG: CommandId = 0x2, |
| [1659415376.888125][2666:2671] CHIP:DMG: }, |
| [1659415376.888225][2666:2671] CHIP:DMG: |
| [1659415376.888289][2666:2671] CHIP:DMG: CommandFields = |
| [1659415376.888384][2666:2671] CHIP:DMG: { |
| [1659415376.888478][2666:2671] CHIP:DMG: 0x0 = 2, |
| [1659415376.888560][2666:2671] CHIP:DMG: }, |
| [1659415376.888655][2666:2671] CHIP:DMG: }, |
| [1659415376.888728][2666:2671] CHIP:DMG: |
| [1659415376.888806][2666:2671] CHIP:DMG: ], |
| [1659415376.888877][2666:2671] CHIP:DMG: |
| [1659415376.888955][2666:2671] CHIP:DMG: InteractionModelRevision = 1 |
| [1659415376.889012][2666:2671] CHIP:DMG: }, |
| [1659415376.889086][2666:2671] CHIP:DMG: |
| [1659415376.889368][2666:2671] CHIP:DMG: ICR moving to [CommandSen] |
| [1659415376.889523][2666:2671] CHIP:DMG: ICR moving to [AwaitingDe] |
| [1659415376.972895][2666:2671] CHIP:DL: HandlePlatformSpecificBLEEvent 16387 |
| [1659415377.021227][2666:2669] CHIP:DL: Indication received, conn = 0xffffa803b9b0 |
| [1659415377.021488][2666:2671] CHIP:DL: HandlePlatformSpecificBLEEvent 16389 |
| [1659415377.122119][2666:2669] CHIP:DL: Indication received, conn = 0xffffa803b9b0 |
| [1659415377.122505][2666:2671] CHIP:DL: HandlePlatformSpecificBLEEvent 16389 |
| [1659415377.217641][2666:2669] CHIP:DL: Indication received, conn = 0xffffa803b9b0 |
| [1659415377.217905][2666:2671] CHIP:DL: HandlePlatformSpecificBLEEvent 16389 |
| [1659415377.219135][2666:2671] CHIP:DMG: << from BLE | 199585160 | [Interaction Model (1) / InvokeCommandResponse (0x09) / Session = 46479 / Exchange = 61632] |
| [1659415377.219238][2666:2671] CHIP:DMG: Header Flags = |
| [1659415377.219295][2666:2671] CHIP:DMG: { |
| [1659415377.219391][2666:2671] CHIP:DMG: } |
| [1659415377.219446][2666:2671] CHIP:DMG: |
| [1659415377.219518][2666:2671] CHIP:DMG: Encrypted Payload (527 bytes) = |
| [1659415377.219573][2666:2671] CHIP:DMG: { |
| [1659415377.219626][2666:2671] CHIP:DMG: data = 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 |
| [1659415377.219729][2666:2671] CHIP:DMG: buffer_ptr = 281473366176768 |
| [1659415377.219780][2666:2671] CHIP:DMG: } |
| [1659415377.219830][2666:2671] CHIP:DMG: |
| [1659415377.220104][2666:2671] CHIP:DMG: DAC/PAI (463) = |
| [1659415377.220220][2666:2671] CHIP:DMG: { |
| -----BEGIN CERTIFICATE----- |
| MIIByzCCAXGgAwIBAgIIVq2CIq2UW2QwCgYIKoZIzj0EAwIwMDEYMBYGA1UEAwwP |
| TWF0dGVyIFRlc3QgUEFBMRQwEgYKKwYBBAGConwCAQwERkZGMTAgFw0yMjAyMDUw |
| MDAwMDBaGA85OTk5MTIzMTIzNTk1OVowPTElMCMGA1UEAwwcTWF0dGVyIERldiBQ |
| QUkgMHhGRkYxIG5vIFBJRDEUMBIGCisGAQQBgqJ8AgEMBEZGRjEwWTATBgcqhkjO |
| PQIBBggqhkjOPQMBBwNCAARBmpMVwhc+DIyHbQPM/JRIUmR/f+xeUIL0BZko7KiU |
| xZQVEwmsYx5MsDOSr2hLC6+35ls7gWLC9Sv5MbjneqqCo2YwZDASBgNVHRMBAf8E |
| CDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUY1QOR/ZLHDjROISk |
| YtFsGV2P+zwwHwYDVR0jBBgwFoAUav0idx9RH+y/FkGXZxDc3DGhcX4wCgYIKoZI |
| zj0EAwIDSAAwRQIhALLvJ/Sa6bUPuR7qyUxNC9u415KcbLiPrOUpNo0SBUwMAiBl |
| Xckrhr2QmIKmxiF3uCXX0F7b58Ivn+pxIg5+pwP4kQ== |
| -----END CERTIFICATE----- |
| [1659415377.220439][2666:2671] CHIP:DMG: } |
| [1659415377.220490][2666:2671] CHIP:DMG: |
| [1659415377.220553][2666:2671] CHIP:DMG: |
| [1659415377.220635][2666:2671] CHIP:DMG: Additional Fields = |
| [1659415377.220689][2666:2671] CHIP:DMG: { |
| [1659415377.220748][2666:2671] CHIP:DMG: peer_address = BLE |
| [1659415377.220801][2666:2671] CHIP:DMG: } |
| [1659415377.220850][2666:2671] CHIP:DMG: |
| [1659415377.220914][2666:2671] CHIP:EM: Received message of type 0x9 with protocolId (0, 1) and MessageCounter:199585160 on exchange 61632i |
| [1659415377.220977][2666:2671] CHIP:EM: Found matching exchange: 61632i, Delegate: 0xffffa803c898 |
| [1659415377.221071][2666:2671] CHIP:DMG: ICR moving to [ResponseRe] |
| [1659415377.221162][2666:2671] CHIP:DMG: InvokeResponseMessage = |
| [1659415377.221222][2666:2671] CHIP:DMG: { |
| [1659415377.221279][2666:2671] CHIP:DMG: suppressResponse = false, |
| [1659415377.221339][2666:2671] CHIP:DMG: InvokeResponseIBs = |
| [1659415377.221413][2666:2671] CHIP:DMG: [ |
| [1659415377.221473][2666:2671] CHIP:DMG: InvokeResponseIB = |
| [1659415377.221551][2666:2671] CHIP:DMG: { |
| [1659415377.221615][2666:2671] CHIP:DMG: CommandDataIB = |
| [1659415377.221691][2666:2671] CHIP:DMG: { |
| [1659415377.221764][2666:2671] CHIP:DMG: CommandPathIB = |
| [1659415377.221855][2666:2671] CHIP:DMG: { |
| [1659415377.221949][2666:2671] CHIP:DMG: EndpointId = 0x0, |
| [1659415377.222037][2666:2671] CHIP:DMG: ClusterId = 0x3e, |
| [1659415377.222125][2666:2671] CHIP:DMG: CommandId = 0x3, |
| [1659415377.222216][2666:2671] CHIP:DMG: }, |
| [1659415377.222303][2666:2671] CHIP:DMG: |
| [1659415377.222377][2666:2671] CHIP:DMG: CommandFields = |
| [1659415377.222476][2666:2671] CHIP:DMG: { |
| [1659415377.222570][2666:2671] CHIP:DMG: 0x0 = [ |
| [1659415377.222896][2666:2671] CHIP:DMG: 0x30, 0x82, 0x1, 0xcb, 0x30, 0x82, 0x1, 0x71, 0xa0, 0x3, 0x2, 0x1, 0x2, 0x2, 0x8, 0x56, 0xad, 0x82, 0x22, 0xad, 0x94, 0x5b, 0x64, 0x30, 0xa, 0x6, 0x8, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x4, 0x3, 0x2, 0x30, 0x30, 0x31, 0x18, 0x30, 0x16, 0x6, 0x3, 0x55, 0x4, 0x3, 0xc, 0xf, 0x4d, 0x61, 0x74, 0x74, 0x65, 0x72, 0x20, 0x54, 0x65, 0x73, 0x74, 0x20, 0x50, 0x41, 0x41, 0x31, 0x14, 0x30, 0x12, 0x6, 0xa, 0x2b, 0x6, 0x1, 0x4, 0x1, 0x82, 0xa2, 0x7c, 0x2, 0x1, 0xc, 0x4, 0x46, 0x46, 0x46, 0x31, 0x30, 0x20, 0x17, 0xd, 0x32, 0x32, 0x30, 0x32, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x5a, 0x18, 0xf, 0x39, 0x39, 0x39, 0x39, 0x31, 0x32, 0x33, 0x31, 0x32, 0x33, 0x35, 0x39, 0x35, 0x39, 0x5a, 0x30, 0x3d, 0x31, 0x25, 0x30, 0x23, 0x6, 0x3, 0x55, 0x4, 0x3, 0xc, 0x1c, 0x4d, 0x61, 0x74, 0x74, 0x65, 0x72, 0x20, 0x44, 0x65, 0x76, 0x20, 0x50, 0x41, 0x49, 0x20, 0x30, 0x78, 0x46, 0x46, 0x46, 0x31, 0x20, 0x6e, 0x6f, 0x20, 0x50, 0x49, 0x44, 0x31, 0x14, 0x30, 0x12, 0x6, 0xa, 0x2b, 0x6, 0x1, 0x4, 0x1, 0x82, 0xa2, 0x7c, 0x2, 0x1, 0xc, 0x4, 0x46, 0x46, 0x46, 0x31, 0x30, 0x59, 0x30, 0x13, 0x6, 0x7, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x2, 0x1, 0x6, 0x8, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x3, 0x1, 0x7, 0x3, 0x42, 0x0, 0x4, 0x41, 0x9a, 0x93, 0x15, 0xc2, 0x17, 0x3e, 0xc, 0x8c, 0x87, 0x6d, 0x3, 0xcc, 0xfc, 0x94, 0x48, 0x52, 0x64, 0x7f, 0x7f, 0xec, 0x5e, 0x50, 0x82, 0xf4, 0x5, 0x99, 0x28, 0xec, 0xa8, 0x94, 0xc5, 0x94, 0x15, 0x13, 0x9, 0xac, 0x63, 0x1e, 0x4c, 0xb0, 0x33, 0x92, 0xaf, 0x68, 0x4b, 0xb, 0xaf, 0xb7, 0xe6, 0x5b, 0x3b, 0x81, 0x62, 0xc2, 0xf5, 0x2b, 0xf9, 0x31, 0xb8, 0xe7, 0x7a, 0xaa, 0x82, 0xa3, 0x66, 0x30, 0x64, 0x30, 0x12, 0x6, 0x3, 0x55, 0x1d, 0x13, 0x1, 0x1, 0xff, 0x4, 0x8, 0x30, 0x6, 0x1, 0x1, 0xff, 0x2, 0x1, |
| [1659415377.223073][2666:2671] CHIP:DMG: ] (463 bytes) |
| [1659415377.223156][2666:2671] CHIP:DMG: }, |
| [1659415377.223230][2666:2671] CHIP:DMG: }, |
| [1659415377.223312][2666:2671] CHIP:DMG: |
| [1659415377.223374][2666:2671] CHIP:DMG: }, |
| [1659415377.223448][2666:2671] CHIP:DMG: |
| [1659415377.223505][2666:2671] CHIP:DMG: ], |
| [1659415377.223579][2666:2671] CHIP:DMG: |
| [1659415377.223637][2666:2671] CHIP:DMG: InteractionModelRevision = 1 |
| [1659415377.223694][2666:2671] CHIP:DMG: }, |
| [1659415377.223832][2666:2671] CHIP:DMG: Received Command Response Data, Endpoint=0 Cluster=0x0000_003E Command=0x0000_0003 |
| [1659415377.223908][2666:2671] CHIP:CTL: Received certificate chain from the device |
| [1659415377.224018][2666:2671] CHIP:CTL: Successfully finished commissioning step "SendPAICertificateRequest" |
| |
| |
| "1. Save the PAI value from commissioning log of TH in the file as below |
| vi pai_6.pem |
| |
| 2. Give the below command to extract the Authority key ID |
| openssl x509 -in pai_6.pem -text |
| |
| Below certificate has been extracted using the sample DUT, hence the Authority key ID is same as SDK"s test PAA |
| |
| grl@grl-ThinkPad-L480:~/jul14_2ndcntrl/connectedhomeip$ openssl x509 -in pai_6.pem -text |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: 4498223361705918669 (0x3e6ce6509ad840cd) |
| Signature Algorithm: ecdsa-with-SHA256 |
| Issuer: CN = Matter Test PAA, 1.3.6.1.4.1.37244.2.1 = FFF1 |
| Validity |
| Not Before: Jun 28 14:23:43 2021 GMT |
| Not After : Dec 31 23:59:59 9999 GMT |
| Subject: CN = Matter Test PAI, 1.3.6.1.4.1.37244.2.1 = FFF1, 1.3.6.1.4.1.37244.2.2 = 8000 |
| Subject Public Key Info: |
| Public Key Algorithm: id-ecPublicKey |
| Public-Key: (256 bit) |
| pub: |
| 04:80:dd:f1:1b:22:8f:3e:31:f6:3b:cf:57:98:da: |
| 14:62:3a:eb:bd:e8:2e:f3:78:ee:ad:bf:b1:8f:e1: |
| ab:ce:31:d0:8e:d4:b2:06:04:b6:cc:c6:d9:b5:fa: |
| b6:4e:7d:e1:0c:b7:4b:e0:17:c9:ec:15:16:05:6d: |
| 70:f2:cd:0b:22 |
| ASN1 OID: prime256v1 |
| NIST CURVE: P-256 |
| X509v3 extensions: |
| X509v3 Basic Constraints: critical |
| CA:TRUE, pathlen:0 |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Subject Key Identifier: |
| AF:42:B7:09:4D:EB:D5:15:EC:6E:CF:33:B8:11:15:22:5F:32:52:88 |
| X509v3 Authority Key Identifier: |
| keyid:6A:FD:22:77:1F:51:1F:EC:BF:16:41:97:67:10:DC:DC:31:A1:71:7E |
| |
| Signature Algorithm: ecdsa-with-SHA256 |
| 30:45:02:21:00:96:c9:c8:cf:2e:01:88:60:05:d8:f5:bc:72: |
| c0:7b:75:fd:9a:57:69:5a:c4:91:11:31:13:8b:ea:03:3c:e5: |
| 03:02:20:25:54:94:3b:e5:7d:53:d6:c4:75:f7:d2:3e:bf:cf: |
| c2:03:6c:d2:9b:a6:39:3e:c7:ef:ad:87:14:ab:71:82:19 |
| -----BEGIN CERTIFICATE----- |
| MIIB1DCCAXqgAwIBAgIIPmzmUJrYQM0wCgYIKoZIzj0EAwIwMDEYMBYGA1UEAwwP |
| TWF0dGVyIFRlc3QgUEFBMRQwEgYKKwYBBAGConwCAQwERkZGMTAgFw0yMTA2Mjgx |
| NDIzNDNaGA85OTk5MTIzMTIzNTk1OVowRjEYMBYGA1UEAwwPTWF0dGVyIFRlc3Qg |
| UEFJMRQwEgYKKwYBBAGConwCAQwERkZGMTEUMBIGCisGAQQBgqJ8AgIMBDgwMDAw |
| WTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAASA3fEbIo8+MfY7z1eY2hRiOuu96C7z |
| eO6tv7GP4avOMdCO1LIGBLbMxtm1+rZOfeEMt0vgF8nsFRYFbXDyzQsio2YwZDAS |
| BgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUr0K3 |
| CU3r1RXsbs8zuBEVIl8yUogwHwYDVR0jBBgwFoAUav0idx9RH+y/FkGXZxDc3DGh |
| cX4wCgYIKoZIzj0EAwIDSAAwRQIhAJbJyM8uAYhgBdj1vHLAe3X9mldpWsSRETET |
| i+oDPOUDAiAlVJQ75X1T1sR199I+v8/CA2zSm6Y5PsfvrYcUq3GCGQ== |
| -----END CERTIFICATE----- |
| disabled: true |
| |
| - label: |
| "Repeat Step 1 to 4 with DUT2, saving the PAI, DAC and public key as |
| pk_2" |
| verification: | |
| verification step to be updated. |
| disabled: true |
