# Copyright (c) 2021 Project CHIP Authors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# Auto-generated scripts for harness use only, please review before automation. The endpoints and cluster names are currently set to default

name: 4.1.7. [TC-DA-1.7] Validate CertificateChainRequest [DUT-Commissionee]

PICS:
    - MCORE.ROLE.COMMISSIONEE

config:
    nodeId: 0x12344321
    cluster: "Basic"
    endpoint: 0

tests:
    - label: "Pre-Conditions TH only has official PAAs from DCL"
      verification: |
          verification step to be updated.
      disabled: true

    - label: "Commission DUT1 to TH fabric"
      verification: |
          sudo ./chip-all-clusters-app --wifi

          TH side:
          ./chip-tool pairing ble-wifi 1 zigbeehome matter123 20202021 3841 --trace_decode 1

          [1650455358.501816][4366:4371] CHIP:TOO: Device commissioning completed with success
      disabled: true

    - label:
          "TH sends CertificateChainRequest Command to DUT1 with the
          CertificateType set to PAICertificate"
      verification: |
          To get DAC value, send below command.
          ./chip-tool operationalcredentials certificate-chain-request 1 1 0

          "Verify in TH log:

          [1657774717.721972][7956:7961] CHIP:DMG: Received Command Response Data, Endpoint=0 Cluster=0x0000_003E Command=0x0000_0003
          [1657774717.722019][7956:7961] CHIP:TOO: Endpoint: 0 Cluster: 0x0000_003E Command 0x0000_0003
          [1657774717.722135][7956:7961] CHIP:TOO:   CertificateChainResponse: {
          [1657774717.722181][7956:7961] CHIP:TOO:     certificate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
          [1657774717.722269][7956:7961] CHIP:TOO:     ...........: 034700304402200127A27B4B44610EE2FCDC4D2B7885563660BC0F76F17219ED6A08DFB2B3C1CD02206B59E0AF45F3EB2A85B919D35731528C6028C415239545E108E4E54E70971353
          [1657774717.722297][7956:7961] CHIP:TOO:    }


          To get PAI value, send below command.
          ./chip-tool operationalcredentials certificate-chain-request 2 1 0

          "Verify in TH log:

          [1657774756.281112][7964:7969] CHIP:DMG: Received Command Response Data, Endpoint=0 Cluster=0x0000_003E Command=0x0000_0003
          [1657774756.281164][7964:7969] CHIP:TOO: Endpoint: 0 Cluster: 0x0000_003E Command 0x0000_0003
          [1657774756.281236][7964:7969] CHIP:TOO:   CertificateChainResponse: {
          [1657774756.281289][7964:7969] CHIP:TOO:     certificate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
          [1657774756.281357][7964:7969] CHIP:TOO:     ...........: B88FACE529368D12054C0C0220655DC92B86BD909882A6C62177B825D7D05EDBE7C22F9FEA71220E7EA703F891
          [1657774756.281388][7964:7969] CHIP:TOO:    }
      disabled: true

    - label:
          "TH sends CertificateChainRequest Command to DUT1 with the
          CertificateType set to DACCertificate"
      verification: |
          See above
      disabled: true

    - label: "TH extracts the Authority Key Identifier from the PAI certificate"
      verification: |
          During commissioning we will get PAI  certificate,  see in below log:

          [1659415376.883870][2666:2671] CHIP:CTL: Performing next commissioning step "SendPAICertificateRequest"
          [1659415376.883925][2666:2671] CHIP:CTL: Sending request for PAI certificate
          [1659415376.884015][2666:2671] CHIP:CTL: Sending Certificate Chain request to 0xffffa0000b60 device
          [1659415376.884167][2666:2671] CHIP:DMG: ICR moving to [AddingComm]
          [1659415376.884302][2666:2671] CHIP:DMG: ICR moving to [AddedComma]
          [1659415376.884867][2666:2671] CHIP:IN: Prepared secure message 0xffffb37ec8d8 to 0xFFFFFFFB00000000 (0)  of type 0x8 and protocolId (0, 1) on exchange 61632i with MessageCounter:72933899.
          [1659415376.884965][2666:2671] CHIP:IN: Sending encrypted msg 0xffffb37ec8d8 with MessageCounter:72933899 to 0xFFFFFFFB00000000 (0) at monotonic time: 0000000000161D55 msec
          [1659415376.885796][2666:2671] CHIP:DMG: >> to BLE | 72933899 | [Interaction Model  (1) / InvokeCommandRequest (0x08) / Session = 384 / Exchange = 61632]
          [1659415376.885890][2666:2671] CHIP:DMG: Header Flags =
          [1659415376.885944][2666:2671] CHIP:DMG: {
          [1659415376.886028][2666:2671] CHIP:DMG:     Exchange (0x01) =
          [1659415376.886081][2666:2671] CHIP:DMG:     {
          [1659415376.886154][2666:2671] CHIP:DMG:         Initiator = true
          [1659415376.886206][2666:2671] CHIP:DMG:     }
          [1659415376.886296][2666:2671] CHIP:DMG: }
          [1659415376.886350][2666:2671] CHIP:DMG:
          [1659415376.886438][2666:2671] CHIP:DMG: Encrypted Payload (62 bytes) =
          [1659415376.886492][2666:2671] CHIP:DMG: {
          [1659415376.886542][2666:2671] CHIP:DMG:     data = 008001000be258046e751fb56b97dabcc7ee6b6611ede33a66461e188834bb1fe5b6332edb4a3896d32bce2eb59dee722e070c4426af77c82dfca14619bb
          [1659415376.886616][2666:2671] CHIP:DMG:     buffer_ptr = 281473366182720
          [1659415376.886666][2666:2671] CHIP:DMG: }
          [1659415376.886714][2666:2671] CHIP:DMG:
          [1659415376.886900][2666:2671] CHIP:DMG: InvokeRequestMessage =
          [1659415376.886962][2666:2671] CHIP:DMG: {
          [1659415376.887039][2666:2671] CHIP:DMG:         suppressResponse = false,
          [1659415376.887103][2666:2671] CHIP:DMG:         timedRequest = false,
          [1659415376.887162][2666:2671] CHIP:DMG:         InvokeRequests =
          [1659415376.887234][2666:2671] CHIP:DMG:         [
          [1659415376.887312][2666:2671] CHIP:DMG:                 CommandDataIB =
          [1659415376.887380][2666:2671] CHIP:DMG:                 {
          [1659415376.887442][2666:2671] CHIP:DMG:                         CommandPathIB =
          [1659415376.887538][2666:2671] CHIP:DMG:                         {
          [1659415376.887633][2666:2671] CHIP:DMG:                                 EndpointId = 0x0,
          [1659415376.887874][2666:2671] CHIP:DMG:                                 ClusterId = 0x3e,
          [1659415376.888039][2666:2671] CHIP:DMG:                                 CommandId = 0x2,
          [1659415376.888125][2666:2671] CHIP:DMG:                         },
          [1659415376.888225][2666:2671] CHIP:DMG:
          [1659415376.888289][2666:2671] CHIP:DMG:                         CommandFields =
          [1659415376.888384][2666:2671] CHIP:DMG:                         {
          [1659415376.888478][2666:2671] CHIP:DMG:                                 0x0 = 2,
          [1659415376.888560][2666:2671] CHIP:DMG:                         },
          [1659415376.888655][2666:2671] CHIP:DMG:                 },
          [1659415376.888728][2666:2671] CHIP:DMG:
          [1659415376.888806][2666:2671] CHIP:DMG:         ],
          [1659415376.888877][2666:2671] CHIP:DMG:
          [1659415376.888955][2666:2671] CHIP:DMG:         InteractionModelRevision = 1
          [1659415376.889012][2666:2671] CHIP:DMG: },
          [1659415376.889086][2666:2671] CHIP:DMG:
          [1659415376.889368][2666:2671] CHIP:DMG: ICR moving to [CommandSen]
          [1659415376.889523][2666:2671] CHIP:DMG: ICR moving to [AwaitingDe]
          [1659415376.972895][2666:2671] CHIP:DL: HandlePlatformSpecificBLEEvent 16387
          [1659415377.021227][2666:2669] CHIP:DL: Indication received, conn = 0xffffa803b9b0
          [1659415377.021488][2666:2671] CHIP:DL: HandlePlatformSpecificBLEEvent 16389
          [1659415377.122119][2666:2669] CHIP:DL: Indication received, conn = 0xffffa803b9b0
          [1659415377.122505][2666:2671] CHIP:DL: HandlePlatformSpecificBLEEvent 16389
          [1659415377.217641][2666:2669] CHIP:DL: Indication received, conn = 0xffffa803b9b0
          [1659415377.217905][2666:2671] CHIP:DL: HandlePlatformSpecificBLEEvent 16389
          [1659415377.219135][2666:2671] CHIP:DMG: << from BLE | 199585160 | [Interaction Model  (1) / InvokeCommandResponse (0x09) / Session = 46479 / Exchange = 61632]
          [1659415377.219238][2666:2671] CHIP:DMG: Header Flags =
          [1659415377.219295][2666:2671] CHIP:DMG: {
          [1659415377.219391][2666:2671] CHIP:DMG: }
          [1659415377.219446][2666:2671] CHIP:DMG:
          [1659415377.219518][2666:2671] CHIP:DMG: Encrypted Payload (527 bytes) =
          [1659415377.219573][2666:2671] CHIP:DMG: {
          [1659415377.219626][2666:2671] CHIP:DMG:     data = 008fb500886de50b9dd1c80f8f48187dc9457d6066ed57c1f15550aefb6a675573c3fcff99cc266b26bdbd97c5ac460ff50e513fd8ef02f39294c2e79b507b0d7b6342caea806048b1c64804aae7bb9d4cdb04d4c7c4d345788e332256c05e7ea38eddd7693e4a39cdfe625688f0101cf16af6f5281049b25e47e6931b06c832d9a014a8248d7cfe31d8b75ebb7805b511293591caa108030939b43b951ad2a164692b051201f9c777e769b9632f05b94bc1990718ec3d2e0fa0161da28ec39bc51017c519e994e9fbbc68693e86ae9fa72618a5a0bc9a133e919bf61ca0805a90a09807c5c4b88329bd1d99149788c5464650dc3b7223e11f4d5a487c0b589453f725b035b543b0159801bee756dcd835832af45402931d73f4977371c90a3fd406905b278fefccf607e0699cac0b082d062b563f17d6e9438720a885f6b5d0dd035d652fd9b88790b1e79995030977f4423139eff3d2e36915065474ea1996705bd63b40395344e402c191e54c1c136c4daa31040ea09cc39c5804dd4203763d05e30d2cfd50ed84e12fd01ecf9c49a4bf7fe73c13416af1cc8bed4f5f2e8919f5724d698990115f97c08f43f9dd463883b53d09e6f888ac8a8d8ba91bd65b242ae049cccd4af6fdcfa402877ba10fb560008d07054deb1e9f1a39fd9110930e1e620fc64f999255a52f8064dc1c83fe6aa35de56c44850e932c82919c1f1af174afa75f3ef77c8b08fcace33883
          [1659415377.219729][2666:2671] CHIP:DMG:     buffer_ptr = 281473366176768
          [1659415377.219780][2666:2671] CHIP:DMG: }
          [1659415377.219830][2666:2671] CHIP:DMG:
          [1659415377.220104][2666:2671] CHIP:DMG: DAC/PAI (463) =
          [1659415377.220220][2666:2671] CHIP:DMG: {
          -----BEGIN CERTIFICATE-----
          MIIByzCCAXGgAwIBAgIIVq2CIq2UW2QwCgYIKoZIzj0EAwIwMDEYMBYGA1UEAwwP
          TWF0dGVyIFRlc3QgUEFBMRQwEgYKKwYBBAGConwCAQwERkZGMTAgFw0yMjAyMDUw
          MDAwMDBaGA85OTk5MTIzMTIzNTk1OVowPTElMCMGA1UEAwwcTWF0dGVyIERldiBQ
          QUkgMHhGRkYxIG5vIFBJRDEUMBIGCisGAQQBgqJ8AgEMBEZGRjEwWTATBgcqhkjO
          PQIBBggqhkjOPQMBBwNCAARBmpMVwhc+DIyHbQPM/JRIUmR/f+xeUIL0BZko7KiU
          xZQVEwmsYx5MsDOSr2hLC6+35ls7gWLC9Sv5MbjneqqCo2YwZDASBgNVHRMBAf8E
          CDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUY1QOR/ZLHDjROISk
          YtFsGV2P+zwwHwYDVR0jBBgwFoAUav0idx9RH+y/FkGXZxDc3DGhcX4wCgYIKoZI
          zj0EAwIDSAAwRQIhALLvJ/Sa6bUPuR7qyUxNC9u415KcbLiPrOUpNo0SBUwMAiBl
          Xckrhr2QmIKmxiF3uCXX0F7b58Ivn+pxIg5+pwP4kQ==
          -----END CERTIFICATE-----
          [1659415377.220439][2666:2671] CHIP:DMG: }
          [1659415377.220490][2666:2671] CHIP:DMG:
          [1659415377.220553][2666:2671] CHIP:DMG:
          [1659415377.220635][2666:2671] CHIP:DMG: Additional Fields =
          [1659415377.220689][2666:2671] CHIP:DMG: {
          [1659415377.220748][2666:2671] CHIP:DMG:     peer_address = BLE
          [1659415377.220801][2666:2671] CHIP:DMG: }
          [1659415377.220850][2666:2671] CHIP:DMG:
          [1659415377.220914][2666:2671] CHIP:EM: Received message of type 0x9 with protocolId (0, 1) and MessageCounter:199585160 on exchange 61632i
          [1659415377.220977][2666:2671] CHIP:EM: Found matching exchange: 61632i, Delegate: 0xffffa803c898
          [1659415377.221071][2666:2671] CHIP:DMG: ICR moving to [ResponseRe]
          [1659415377.221162][2666:2671] CHIP:DMG: InvokeResponseMessage =
          [1659415377.221222][2666:2671] CHIP:DMG: {
          [1659415377.221279][2666:2671] CHIP:DMG:         suppressResponse = false,
          [1659415377.221339][2666:2671] CHIP:DMG:         InvokeResponseIBs =
          [1659415377.221413][2666:2671] CHIP:DMG:         [
          [1659415377.221473][2666:2671] CHIP:DMG:                 InvokeResponseIB =
          [1659415377.221551][2666:2671] CHIP:DMG:                 {
          [1659415377.221615][2666:2671] CHIP:DMG:                         CommandDataIB =
          [1659415377.221691][2666:2671] CHIP:DMG:                         {
          [1659415377.221764][2666:2671] CHIP:DMG:                                 CommandPathIB =
          [1659415377.221855][2666:2671] CHIP:DMG:                                 {
          [1659415377.221949][2666:2671] CHIP:DMG:                                         EndpointId = 0x0,
          [1659415377.222037][2666:2671] CHIP:DMG:                                         ClusterId = 0x3e,
          [1659415377.222125][2666:2671] CHIP:DMG:                                         CommandId = 0x3,
          [1659415377.222216][2666:2671] CHIP:DMG:                                 },
          [1659415377.222303][2666:2671] CHIP:DMG:
          [1659415377.222377][2666:2671] CHIP:DMG:                                 CommandFields =
          [1659415377.222476][2666:2671] CHIP:DMG:                                 {
          [1659415377.222570][2666:2671] CHIP:DMG:                                         0x0 = [
          [1659415377.222896][2666:2671] CHIP:DMG:                                                         0x30, 0x82, 0x1, 0xcb, 0x30, 0x82, 0x1, 0x71, 0xa0, 0x3, 0x2, 0x1, 0x2, 0x2, 0x8, 0x56, 0xad, 0x82, 0x22, 0xad, 0x94, 0x5b, 0x64, 0x30, 0xa, 0x6, 0x8, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x4, 0x3, 0x2, 0x30, 0x30, 0x31, 0x18, 0x30, 0x16, 0x6, 0x3, 0x55, 0x4, 0x3, 0xc, 0xf, 0x4d, 0x61, 0x74, 0x74, 0x65, 0x72, 0x20, 0x54, 0x65, 0x73, 0x74, 0x20, 0x50, 0x41, 0x41, 0x31, 0x14, 0x30, 0x12, 0x6, 0xa, 0x2b, 0x6, 0x1, 0x4, 0x1, 0x82, 0xa2, 0x7c, 0x2, 0x1, 0xc, 0x4, 0x46, 0x46, 0x46, 0x31, 0x30, 0x20, 0x17, 0xd, 0x32, 0x32, 0x30, 0x32, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x5a, 0x18, 0xf, 0x39, 0x39, 0x39, 0x39, 0x31, 0x32, 0x33, 0x31, 0x32, 0x33, 0x35, 0x39, 0x35, 0x39, 0x5a, 0x30, 0x3d, 0x31, 0x25, 0x30, 0x23, 0x6, 0x3, 0x55, 0x4, 0x3, 0xc, 0x1c, 0x4d, 0x61, 0x74, 0x74, 0x65, 0x72, 0x20, 0x44, 0x65, 0x76, 0x20, 0x50, 0x41, 0x49, 0x20, 0x30, 0x78, 0x46, 0x46, 0x46, 0x31, 0x20, 0x6e, 0x6f, 0x20, 0x50, 0x49, 0x44, 0x31, 0x14, 0x30, 0x12, 0x6, 0xa, 0x2b, 0x6, 0x1, 0x4, 0x1, 0x82, 0xa2, 0x7c, 0x2, 0x1, 0xc, 0x4, 0x46, 0x46, 0x46, 0x31, 0x30, 0x59, 0x30, 0x13, 0x6, 0x7, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x2, 0x1, 0x6, 0x8, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x3, 0x1, 0x7, 0x3, 0x42, 0x0, 0x4, 0x41, 0x9a, 0x93, 0x15, 0xc2, 0x17, 0x3e, 0xc, 0x8c, 0x87, 0x6d, 0x3, 0xcc, 0xfc, 0x94, 0x48, 0x52, 0x64, 0x7f, 0x7f, 0xec, 0x5e, 0x50, 0x82, 0xf4, 0x5, 0x99, 0x28, 0xec, 0xa8, 0x94, 0xc5, 0x94, 0x15, 0x13, 0x9, 0xac, 0x63, 0x1e, 0x4c, 0xb0, 0x33, 0x92, 0xaf, 0x68, 0x4b, 0xb, 0xaf, 0xb7, 0xe6, 0x5b, 0x3b, 0x81, 0x62, 0xc2, 0xf5, 0x2b, 0xf9, 0x31, 0xb8, 0xe7, 0x7a, 0xaa, 0x82, 0xa3, 0x66, 0x30, 0x64, 0x30, 0x12, 0x6, 0x3, 0x55, 0x1d, 0x13, 0x1, 0x1, 0xff, 0x4, 0x8, 0x30, 0x6, 0x1, 0x1, 0xff, 0x2, 0x1,
          [1659415377.223073][2666:2671] CHIP:DMG:                                         ] (463 bytes)
          [1659415377.223156][2666:2671] CHIP:DMG:                                 },
          [1659415377.223230][2666:2671] CHIP:DMG:                         },
          [1659415377.223312][2666:2671] CHIP:DMG:
          [1659415377.223374][2666:2671] CHIP:DMG:                 },
          [1659415377.223448][2666:2671] CHIP:DMG:
          [1659415377.223505][2666:2671] CHIP:DMG:         ],
          [1659415377.223579][2666:2671] CHIP:DMG:
          [1659415377.223637][2666:2671] CHIP:DMG:         InteractionModelRevision = 1
          [1659415377.223694][2666:2671] CHIP:DMG: },
          [1659415377.223832][2666:2671] CHIP:DMG: Received Command Response Data, Endpoint=0 Cluster=0x0000_003E Command=0x0000_0003
          [1659415377.223908][2666:2671] CHIP:CTL: Received certificate chain from the device
          [1659415377.224018][2666:2671] CHIP:CTL: Successfully finished commissioning step "SendPAICertificateRequest"


          1. Save the PAI value from commissioning log of TH in the file as below
          vi pai_6.pem

          2. Give the below command to extract the Authority key ID
          openssl x509 -in pai_6.pem -text

          Verify that below extracted authority key is not same as the SDK"s test PAA
          1. 78:5C:E7:05:B8:6B:8F:4E:6F:C7:93:AA:60:CB:43:EA:69:68:82:D5
          2. 6A:FD:22:77:1F:51:1F:EC:BF:16:41:97:67:10:DC:DC:31:A1:71:7E

          Below certificate has been extracted using the sample DUT, hence the Authority key ID is same as SDK"s test PAA

          grl@grl-ThinkPad-L480:~/jul14_2ndcntrl/connectedhomeip$ openssl x509 -in pai_6.pem -text
          Certificate:
              Data:
                  Version: 3 (0x2)
                  Serial Number: 4498223361705918669 (0x3e6ce6509ad840cd)
                  Signature Algorithm: ecdsa-with-SHA256
                  Issuer: CN = Matter Test PAA, 1.3.6.1.4.1.37244.2.1 = FFF1
                  Validity
                      Not Before: Jun 28 14:23:43 2021 GMT
                      Not After : Dec 31 23:59:59 9999 GMT
                  Subject: CN = Matter Test PAI, 1.3.6.1.4.1.37244.2.1 = FFF1, 1.3.6.1.4.1.37244.2.2 = 8000
                  Subject Public Key Info:
                      Public Key Algorithm: id-ecPublicKey
                          Public-Key: (256 bit)
                          pub:
                              04:80:dd:f1:1b:22:8f:3e:31:f6:3b:cf:57:98:da:
                              14:62:3a:eb:bd:e8:2e:f3:78:ee:ad:bf:b1:8f:e1:
                              ab:ce:31:d0:8e:d4:b2:06:04:b6:cc:c6:d9:b5:fa:
                              b6:4e:7d:e1:0c:b7:4b:e0:17:c9:ec:15:16:05:6d:
                              70:f2:cd:0b:22
                          ASN1 OID: prime256v1
                          NIST CURVE: P-256
                  X509v3 extensions:
                      X509v3 Basic Constraints: critical
                          CA:TRUE, pathlen:0
                      X509v3 Key Usage: critical
                          Certificate Sign, CRL Sign
                      X509v3 Subject Key Identifier:
                          AF:42:B7:09:4D:EB:D5:15:EC:6E:CF:33:B8:11:15:22:5F:32:52:88
                      X509v3 Authority Key Identifier:
                          keyid:6A:FD:22:77:1F:51:1F:EC:BF:16:41:97:67:10:DC:DC:31:A1:71:7E

              Signature Algorithm: ecdsa-with-SHA256
                   30:45:02:21:00:96:c9:c8:cf:2e:01:88:60:05:d8:f5:bc:72:
                   c0:7b:75:fd:9a:57:69:5a:c4:91:11:31:13:8b:ea:03:3c:e5:
                   03:02:20:25:54:94:3b:e5:7d:53:d6:c4:75:f7:d2:3e:bf:cf:
                   c2:03:6c:d2:9b:a6:39:3e:c7:ef:ad:87:14:ab:71:82:19
          -----BEGIN CERTIFICATE-----
          MIIB1DCCAXqgAwIBAgIIPmzmUJrYQM0wCgYIKoZIzj0EAwIwMDEYMBYGA1UEAwwP
          TWF0dGVyIFRlc3QgUEFBMRQwEgYKKwYBBAGConwCAQwERkZGMTAgFw0yMTA2Mjgx
          NDIzNDNaGA85OTk5MTIzMTIzNTk1OVowRjEYMBYGA1UEAwwPTWF0dGVyIFRlc3Qg
          UEFJMRQwEgYKKwYBBAGConwCAQwERkZGMTEUMBIGCisGAQQBgqJ8AgIMBDgwMDAw
          WTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAASA3fEbIo8+MfY7z1eY2hRiOuu96C7z
          eO6tv7GP4avOMdCO1LIGBLbMxtm1+rZOfeEMt0vgF8nsFRYFbXDyzQsio2YwZDAS
          BgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUr0K3
          CU3r1RXsbs8zuBEVIl8yUogwHwYDVR0jBBgwFoAUav0idx9RH+y/FkGXZxDc3DGh
          cX4wCgYIKoZIzj0EAwIDSAAwRQIhAJbJyM8uAYhgBdj1vHLAe3X9mldpWsSRETET
          i+oDPOUDAiAlVJQ75X1T1sR199I+v8/CA2zSm6Y5PsfvrYcUq3GCGQ==
          -----END CERTIFICATE-----
      disabled: true

    - label: "TH extracts the public key from the DAC and saves as pk_1"
      verification: |
          To commission DUT2 to TH

          "sudo ./chip-all-clusters-app --wifi --discriminator 3844

          TH side:
          ./chip-tool pairing ble-wifi 1 zigbeehome matter123 20202021 3844 --trace_decode 1

          [1650455358.501816][4366:4371] CHIP:TOO: Device commissioning completed with success"


          Verify in TH log:

          ./chip-tool operationalcredentials certificate-chain-request 1 1 0
          [1657774717.721972][7956:7961] CHIP:DMG: Received Command Response Data, Endpoint=0 Cluster=0x0000_003E Command=0x0000_0003
          [1657774717.722019][7956:7961] CHIP:TOO: Endpoint: 0 Cluster: 0x0000_003E Command 0x0000_0003
          [1657774717.722135][7956:7961] CHIP:TOO:   CertificateChainResponse: {
          [1657774717.722181][7956:7961] CHIP:TOO:     certificate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
          [1657774717.722269][7956:7961] CHIP:TOO:     ...........: 034700304402200127A27B4B44610EE2FCDC4D2B7885563660BC0F76F17219ED6A08DFB2B3C1CD02206B59E0AF45F3EB2A85B919D35731528C6028C415239545E108E4E54E70971353
          [1657774717.722297][7956:7961] CHIP:TOO:    }


          ./chip-tool operationalcredentials certificate-chain-request 2 1 0

          [1657774756.281112][7964:7969] CHIP:DMG: Received Command Response Data, Endpoint=0 Cluster=0x0000_003E Command=0x0000_0003
          [1657774756.281164][7964:7969] CHIP:TOO: Endpoint: 0 Cluster: 0x0000_003E Command 0x0000_0003
          [1657774756.281236][7964:7969] CHIP:TOO:   CertificateChainResponse: {
          [1657774756.281289][7964:7969] CHIP:TOO:     certificate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
          [1657774756.281357][7964:7969] CHIP:TOO:     ...........: B88FACE529368D12054C0C0220655DC92B86BD909882A6C62177B825D7D05EDBE7C22F9FEA71220E7EA703F891
          [1657774756.281388][7964:7969] CHIP:TOO:    }


          During commissioning we will get PAI  certificate,  see in below log:

          [1659415376.883870][2666:2671] CHIP:CTL: Performing next commissioning step "SendPAICertificateRequest"
          [1659415376.883925][2666:2671] CHIP:CTL: Sending request for PAI certificate
          [1659415376.884015][2666:2671] CHIP:CTL: Sending Certificate Chain request to 0xffffa0000b60 device
          [1659415376.884167][2666:2671] CHIP:DMG: ICR moving to [AddingComm]
          [1659415376.884302][2666:2671] CHIP:DMG: ICR moving to [AddedComma]
          [1659415376.884867][2666:2671] CHIP:IN: Prepared secure message 0xffffb37ec8d8 to 0xFFFFFFFB00000000 (0)  of type 0x8 and protocolId (0, 1) on exchange 61632i with MessageCounter:72933899.
          [1659415376.884965][2666:2671] CHIP:IN: Sending encrypted msg 0xffffb37ec8d8 with MessageCounter:72933899 to 0xFFFFFFFB00000000 (0) at monotonic time: 0000000000161D55 msec
          [1659415376.885796][2666:2671] CHIP:DMG: >> to BLE | 72933899 | [Interaction Model  (1) / InvokeCommandRequest (0x08) / Session = 384 / Exchange = 61632]
          [1659415376.885890][2666:2671] CHIP:DMG: Header Flags =
          [1659415376.885944][2666:2671] CHIP:DMG: {
          [1659415376.886028][2666:2671] CHIP:DMG:     Exchange (0x01) =
          [1659415376.886081][2666:2671] CHIP:DMG:     {
          [1659415376.886154][2666:2671] CHIP:DMG:         Initiator = true
          [1659415376.886206][2666:2671] CHIP:DMG:     }
          [1659415376.886296][2666:2671] CHIP:DMG: }
          [1659415376.886350][2666:2671] CHIP:DMG:
          [1659415376.886438][2666:2671] CHIP:DMG: Encrypted Payload (62 bytes) =
          [1659415376.886492][2666:2671] CHIP:DMG: {
          [1659415376.886542][2666:2671] CHIP:DMG:     data = 008001000be258046e751fb56b97dabcc7ee6b6611ede33a66461e188834bb1fe5b6332edb4a3896d32bce2eb59dee722e070c4426af77c82dfca14619bb
          [1659415376.886616][2666:2671] CHIP:DMG:     buffer_ptr = 281473366182720
          [1659415376.886666][2666:2671] CHIP:DMG: }
          [1659415376.886714][2666:2671] CHIP:DMG:
          [1659415376.886900][2666:2671] CHIP:DMG: InvokeRequestMessage =
          [1659415376.886962][2666:2671] CHIP:DMG: {
          [1659415376.887039][2666:2671] CHIP:DMG:         suppressResponse = false,
          [1659415376.887103][2666:2671] CHIP:DMG:         timedRequest = false,
          [1659415376.887162][2666:2671] CHIP:DMG:         InvokeRequests =
          [1659415376.887234][2666:2671] CHIP:DMG:         [
          [1659415376.887312][2666:2671] CHIP:DMG:                 CommandDataIB =
          [1659415376.887380][2666:2671] CHIP:DMG:                 {
          [1659415376.887442][2666:2671] CHIP:DMG:                         CommandPathIB =
          [1659415376.887538][2666:2671] CHIP:DMG:                         {
          [1659415376.887633][2666:2671] CHIP:DMG:                                 EndpointId = 0x0,
          [1659415376.887874][2666:2671] CHIP:DMG:                                 ClusterId = 0x3e,
          [1659415376.888039][2666:2671] CHIP:DMG:                                 CommandId = 0x2,
          [1659415376.888125][2666:2671] CHIP:DMG:                         },
          [1659415376.888225][2666:2671] CHIP:DMG:
          [1659415376.888289][2666:2671] CHIP:DMG:                         CommandFields =
          [1659415376.888384][2666:2671] CHIP:DMG:                         {
          [1659415376.888478][2666:2671] CHIP:DMG:                                 0x0 = 2,
          [1659415376.888560][2666:2671] CHIP:DMG:                         },
          [1659415376.888655][2666:2671] CHIP:DMG:                 },
          [1659415376.888728][2666:2671] CHIP:DMG:
          [1659415376.888806][2666:2671] CHIP:DMG:         ],
          [1659415376.888877][2666:2671] CHIP:DMG:
          [1659415376.888955][2666:2671] CHIP:DMG:         InteractionModelRevision = 1
          [1659415376.889012][2666:2671] CHIP:DMG: },
          [1659415376.889086][2666:2671] CHIP:DMG:
          [1659415376.889368][2666:2671] CHIP:DMG: ICR moving to [CommandSen]
          [1659415376.889523][2666:2671] CHIP:DMG: ICR moving to [AwaitingDe]
          [1659415376.972895][2666:2671] CHIP:DL: HandlePlatformSpecificBLEEvent 16387
          [1659415377.021227][2666:2669] CHIP:DL: Indication received, conn = 0xffffa803b9b0
          [1659415377.021488][2666:2671] CHIP:DL: HandlePlatformSpecificBLEEvent 16389
          [1659415377.122119][2666:2669] CHIP:DL: Indication received, conn = 0xffffa803b9b0
          [1659415377.122505][2666:2671] CHIP:DL: HandlePlatformSpecificBLEEvent 16389
          [1659415377.217641][2666:2669] CHIP:DL: Indication received, conn = 0xffffa803b9b0
          [1659415377.217905][2666:2671] CHIP:DL: HandlePlatformSpecificBLEEvent 16389
          [1659415377.219135][2666:2671] CHIP:DMG: << from BLE | 199585160 | [Interaction Model  (1) / InvokeCommandResponse (0x09) / Session = 46479 / Exchange = 61632]
          [1659415377.219238][2666:2671] CHIP:DMG: Header Flags =
          [1659415377.219295][2666:2671] CHIP:DMG: {
          [1659415377.219391][2666:2671] CHIP:DMG: }
          [1659415377.219446][2666:2671] CHIP:DMG:
          [1659415377.219518][2666:2671] CHIP:DMG: Encrypted Payload (527 bytes) =
          [1659415377.219573][2666:2671] CHIP:DMG: {
          [1659415377.219626][2666:2671] CHIP:DMG:     data = 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
          [1659415377.219729][2666:2671] CHIP:DMG:     buffer_ptr = 281473366176768
          [1659415377.219780][2666:2671] CHIP:DMG: }
          [1659415377.219830][2666:2671] CHIP:DMG:
          [1659415377.220104][2666:2671] CHIP:DMG: DAC/PAI (463) =
          [1659415377.220220][2666:2671] CHIP:DMG: {
          -----BEGIN CERTIFICATE-----
          MIIByzCCAXGgAwIBAgIIVq2CIq2UW2QwCgYIKoZIzj0EAwIwMDEYMBYGA1UEAwwP
          TWF0dGVyIFRlc3QgUEFBMRQwEgYKKwYBBAGConwCAQwERkZGMTAgFw0yMjAyMDUw
          MDAwMDBaGA85OTk5MTIzMTIzNTk1OVowPTElMCMGA1UEAwwcTWF0dGVyIERldiBQ
          QUkgMHhGRkYxIG5vIFBJRDEUMBIGCisGAQQBgqJ8AgEMBEZGRjEwWTATBgcqhkjO
          PQIBBggqhkjOPQMBBwNCAARBmpMVwhc+DIyHbQPM/JRIUmR/f+xeUIL0BZko7KiU
          xZQVEwmsYx5MsDOSr2hLC6+35ls7gWLC9Sv5MbjneqqCo2YwZDASBgNVHRMBAf8E
          CDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUY1QOR/ZLHDjROISk
          YtFsGV2P+zwwHwYDVR0jBBgwFoAUav0idx9RH+y/FkGXZxDc3DGhcX4wCgYIKoZI
          zj0EAwIDSAAwRQIhALLvJ/Sa6bUPuR7qyUxNC9u415KcbLiPrOUpNo0SBUwMAiBl
          Xckrhr2QmIKmxiF3uCXX0F7b58Ivn+pxIg5+pwP4kQ==
          -----END CERTIFICATE-----
          [1659415377.220439][2666:2671] CHIP:DMG: }
          [1659415377.220490][2666:2671] CHIP:DMG:
          [1659415377.220553][2666:2671] CHIP:DMG:
          [1659415377.220635][2666:2671] CHIP:DMG: Additional Fields =
          [1659415377.220689][2666:2671] CHIP:DMG: {
          [1659415377.220748][2666:2671] CHIP:DMG:     peer_address = BLE
          [1659415377.220801][2666:2671] CHIP:DMG: }
          [1659415377.220850][2666:2671] CHIP:DMG:
          [1659415377.220914][2666:2671] CHIP:EM: Received message of type 0x9 with protocolId (0, 1) and MessageCounter:199585160 on exchange 61632i
          [1659415377.220977][2666:2671] CHIP:EM: Found matching exchange: 61632i, Delegate: 0xffffa803c898
          [1659415377.221071][2666:2671] CHIP:DMG: ICR moving to [ResponseRe]
          [1659415377.221162][2666:2671] CHIP:DMG: InvokeResponseMessage =
          [1659415377.221222][2666:2671] CHIP:DMG: {
          [1659415377.221279][2666:2671] CHIP:DMG:         suppressResponse = false,
          [1659415377.221339][2666:2671] CHIP:DMG:         InvokeResponseIBs =
          [1659415377.221413][2666:2671] CHIP:DMG:         [
          [1659415377.221473][2666:2671] CHIP:DMG:                 InvokeResponseIB =
          [1659415377.221551][2666:2671] CHIP:DMG:                 {
          [1659415377.221615][2666:2671] CHIP:DMG:                         CommandDataIB =
          [1659415377.221691][2666:2671] CHIP:DMG:                         {
          [1659415377.221764][2666:2671] CHIP:DMG:                                 CommandPathIB =
          [1659415377.221855][2666:2671] CHIP:DMG:                                 {
          [1659415377.221949][2666:2671] CHIP:DMG:                                         EndpointId = 0x0,
          [1659415377.222037][2666:2671] CHIP:DMG:                                         ClusterId = 0x3e,
          [1659415377.222125][2666:2671] CHIP:DMG:                                         CommandId = 0x3,
          [1659415377.222216][2666:2671] CHIP:DMG:                                 },
          [1659415377.222303][2666:2671] CHIP:DMG:
          [1659415377.222377][2666:2671] CHIP:DMG:                                 CommandFields =
          [1659415377.222476][2666:2671] CHIP:DMG:                                 {
          [1659415377.222570][2666:2671] CHIP:DMG:                                         0x0 = [
          [1659415377.222896][2666:2671] CHIP:DMG:                                                         0x30, 0x82, 0x1, 0xcb, 0x30, 0x82, 0x1, 0x71, 0xa0, 0x3, 0x2, 0x1, 0x2, 0x2, 0x8, 0x56, 0xad, 0x82, 0x22, 0xad, 0x94, 0x5b, 0x64, 0x30, 0xa, 0x6, 0x8, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x4, 0x3, 0x2, 0x30, 0x30, 0x31, 0x18, 0x30, 0x16, 0x6, 0x3, 0x55, 0x4, 0x3, 0xc, 0xf, 0x4d, 0x61, 0x74, 0x74, 0x65, 0x72, 0x20, 0x54, 0x65, 0x73, 0x74, 0x20, 0x50, 0x41, 0x41, 0x31, 0x14, 0x30, 0x12, 0x6, 0xa, 0x2b, 0x6, 0x1, 0x4, 0x1, 0x82, 0xa2, 0x7c, 0x2, 0x1, 0xc, 0x4, 0x46, 0x46, 0x46, 0x31, 0x30, 0x20, 0x17, 0xd, 0x32, 0x32, 0x30, 0x32, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x5a, 0x18, 0xf, 0x39, 0x39, 0x39, 0x39, 0x31, 0x32, 0x33, 0x31, 0x32, 0x33, 0x35, 0x39, 0x35, 0x39, 0x5a, 0x30, 0x3d, 0x31, 0x25, 0x30, 0x23, 0x6, 0x3, 0x55, 0x4, 0x3, 0xc, 0x1c, 0x4d, 0x61, 0x74, 0x74, 0x65, 0x72, 0x20, 0x44, 0x65, 0x76, 0x20, 0x50, 0x41, 0x49, 0x20, 0x30, 0x78, 0x46, 0x46, 0x46, 0x31, 0x20, 0x6e, 0x6f, 0x20, 0x50, 0x49, 0x44, 0x31, 0x14, 0x30, 0x12, 0x6, 0xa, 0x2b, 0x6, 0x1, 0x4, 0x1, 0x82, 0xa2, 0x7c, 0x2, 0x1, 0xc, 0x4, 0x46, 0x46, 0x46, 0x31, 0x30, 0x59, 0x30, 0x13, 0x6, 0x7, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x2, 0x1, 0x6, 0x8, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x3, 0x1, 0x7, 0x3, 0x42, 0x0, 0x4, 0x41, 0x9a, 0x93, 0x15, 0xc2, 0x17, 0x3e, 0xc, 0x8c, 0x87, 0x6d, 0x3, 0xcc, 0xfc, 0x94, 0x48, 0x52, 0x64, 0x7f, 0x7f, 0xec, 0x5e, 0x50, 0x82, 0xf4, 0x5, 0x99, 0x28, 0xec, 0xa8, 0x94, 0xc5, 0x94, 0x15, 0x13, 0x9, 0xac, 0x63, 0x1e, 0x4c, 0xb0, 0x33, 0x92, 0xaf, 0x68, 0x4b, 0xb, 0xaf, 0xb7, 0xe6, 0x5b, 0x3b, 0x81, 0x62, 0xc2, 0xf5, 0x2b, 0xf9, 0x31, 0xb8, 0xe7, 0x7a, 0xaa, 0x82, 0xa3, 0x66, 0x30, 0x64, 0x30, 0x12, 0x6, 0x3, 0x55, 0x1d, 0x13, 0x1, 0x1, 0xff, 0x4, 0x8, 0x30, 0x6, 0x1, 0x1, 0xff, 0x2, 0x1,
          [1659415377.223073][2666:2671] CHIP:DMG:                                         ] (463 bytes)
          [1659415377.223156][2666:2671] CHIP:DMG:                                 },
          [1659415377.223230][2666:2671] CHIP:DMG:                         },
          [1659415377.223312][2666:2671] CHIP:DMG:
          [1659415377.223374][2666:2671] CHIP:DMG:                 },
          [1659415377.223448][2666:2671] CHIP:DMG:
          [1659415377.223505][2666:2671] CHIP:DMG:         ],
          [1659415377.223579][2666:2671] CHIP:DMG:
          [1659415377.223637][2666:2671] CHIP:DMG:         InteractionModelRevision = 1
          [1659415377.223694][2666:2671] CHIP:DMG: },
          [1659415377.223832][2666:2671] CHIP:DMG: Received Command Response Data, Endpoint=0 Cluster=0x0000_003E Command=0x0000_0003
          [1659415377.223908][2666:2671] CHIP:CTL: Received certificate chain from the device
          [1659415377.224018][2666:2671] CHIP:CTL: Successfully finished commissioning step "SendPAICertificateRequest"


          "1. Save the PAI value from commissioning log of TH in the file as below
          vi pai_6.pem

          2. Give the below command to extract the Authority key ID
          openssl x509 -in pai_6.pem -text

          Below certificate has been extracted using the sample DUT, hence the Authority key ID is same as SDK"s test PAA

          grl@grl-ThinkPad-L480:~/jul14_2ndcntrl/connectedhomeip$ openssl x509 -in pai_6.pem -text
          Certificate:
              Data:
                  Version: 3 (0x2)
                  Serial Number: 4498223361705918669 (0x3e6ce6509ad840cd)
                  Signature Algorithm: ecdsa-with-SHA256
                  Issuer: CN = Matter Test PAA, 1.3.6.1.4.1.37244.2.1 = FFF1
                  Validity
                      Not Before: Jun 28 14:23:43 2021 GMT
                      Not After : Dec 31 23:59:59 9999 GMT
                  Subject: CN = Matter Test PAI, 1.3.6.1.4.1.37244.2.1 = FFF1, 1.3.6.1.4.1.37244.2.2 = 8000
                  Subject Public Key Info:
                      Public Key Algorithm: id-ecPublicKey
                          Public-Key: (256 bit)
                          pub:
                              04:80:dd:f1:1b:22:8f:3e:31:f6:3b:cf:57:98:da:
                              14:62:3a:eb:bd:e8:2e:f3:78:ee:ad:bf:b1:8f:e1:
                              ab:ce:31:d0:8e:d4:b2:06:04:b6:cc:c6:d9:b5:fa:
                              b6:4e:7d:e1:0c:b7:4b:e0:17:c9:ec:15:16:05:6d:
                              70:f2:cd:0b:22
                          ASN1 OID: prime256v1
                          NIST CURVE: P-256
                  X509v3 extensions:
                      X509v3 Basic Constraints: critical
                          CA:TRUE, pathlen:0
                      X509v3 Key Usage: critical
                          Certificate Sign, CRL Sign
                      X509v3 Subject Key Identifier:
                          AF:42:B7:09:4D:EB:D5:15:EC:6E:CF:33:B8:11:15:22:5F:32:52:88
                      X509v3 Authority Key Identifier:
                          keyid:6A:FD:22:77:1F:51:1F:EC:BF:16:41:97:67:10:DC:DC:31:A1:71:7E

              Signature Algorithm: ecdsa-with-SHA256
                   30:45:02:21:00:96:c9:c8:cf:2e:01:88:60:05:d8:f5:bc:72:
                   c0:7b:75:fd:9a:57:69:5a:c4:91:11:31:13:8b:ea:03:3c:e5:
                   03:02:20:25:54:94:3b:e5:7d:53:d6:c4:75:f7:d2:3e:bf:cf:
                   c2:03:6c:d2:9b:a6:39:3e:c7:ef:ad:87:14:ab:71:82:19
          -----BEGIN CERTIFICATE-----
          MIIB1DCCAXqgAwIBAgIIPmzmUJrYQM0wCgYIKoZIzj0EAwIwMDEYMBYGA1UEAwwP
          TWF0dGVyIFRlc3QgUEFBMRQwEgYKKwYBBAGConwCAQwERkZGMTAgFw0yMTA2Mjgx
          NDIzNDNaGA85OTk5MTIzMTIzNTk1OVowRjEYMBYGA1UEAwwPTWF0dGVyIFRlc3Qg
          UEFJMRQwEgYKKwYBBAGConwCAQwERkZGMTEUMBIGCisGAQQBgqJ8AgIMBDgwMDAw
          WTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAASA3fEbIo8+MfY7z1eY2hRiOuu96C7z
          eO6tv7GP4avOMdCO1LIGBLbMxtm1+rZOfeEMt0vgF8nsFRYFbXDyzQsio2YwZDAS
          BgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUr0K3
          CU3r1RXsbs8zuBEVIl8yUogwHwYDVR0jBBgwFoAUav0idx9RH+y/FkGXZxDc3DGh
          cX4wCgYIKoZIzj0EAwIDSAAwRQIhAJbJyM8uAYhgBdj1vHLAe3X9mldpWsSRETET
          i+oDPOUDAiAlVJQ75X1T1sR199I+v8/CA2zSm6Y5PsfvrYcUq3GCGQ==
          -----END CERTIFICATE-----
      disabled: true

    - label:
          "Repeat Step 1 to 4 with DUT2, saving the PAI, DAC and public key as
          pk_2"
      verification: |
          verification step to be updated.
      disabled: true