| # Copyright (c) 2021 Project CHIP Authors |
| # |
| # Licensed under the Apache License, Version 2.0 (the "License"); |
| # you may not use this file except in compliance with the License. |
| # You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| # See the License for the specific language governing permissions and |
| # limitations under the License. |
| # Auto-generated scripts for harness use only, please review before automation. The endpoints and cluster names are currently set to default |
| |
| name: 12.3.4. [TC-OPCREDS-3.4] UpdateNOC-Error Condition [DUT-Server] |
| |
| PICS: |
| - OPCREDS.S |
| |
| config: |
| nodeId: 0x12344321 |
| cluster: "Basic Information" |
| endpoint: 0 |
| |
| tests: |
| - label: "Precondition" |
| verification: | |
| TH and DUT are commissioned |
| disabled: true |
| |
| - label: "TH1 fully commissions the DUT" |
| verification: | |
| "DUT side: |
| sudo ./chip-all-clusters-app --wifi |
| |
| TH side: |
| ./chip-tool pairing ble-wifi 1 zigbeehome matter123 20202021 3841 --trace_decode 1 |
| |
| [1650455358.501816][4366:4371] CHIP:TOO: Device commissioning completed with success" |
| disabled: true |
| |
| - label: |
| "TH1 reads the NOCs attribute from the Node Operational Credentials |
| cluster using a fabric-filtered read" |
| verification: | |
| ./chip-tool operationalcredentials read nocs 1 0 --fabric-filtered 1 |
| |
| Verify NOC lists and verify the returned lists has single entry in TH(chip-tool) Log |
| |
| [1658736497.592132][3787:3792] CHIP:TOO: Endpoint: 0 Cluster: 0x0000_003E Attribute 0x0000_0000 DataVersion: 999376603 |
| [1658736497.595396][3787:3792] CHIP:TOO: NOCs: 1 entries |
| [1658736497.595477][3787:3792] CHIP:TOO: [1]: { |
| [1658736497.595519][3787:3792] CHIP:TOO: Noc: 1530010101240201370324130118260480228127260580254D3A3706241501241101182407012408013009410410C15281FE7A04637C46E47E30948152C5F9481B6D62D08C9D476A3D44D26E20C704DCAE97FCA4612B17A2A9B16A2D78BF9220F63E9CD19C6589CFC4CE09FF90370A350128011824020136030402040118300414C8FF1A09BE17C6824D61DA88A603A7B180804009300514574F6879804602B57796FB2D6F7212969A171E7118300B40A969CA49361A3F69E3220B19583F05F6D6B2D156AFE1992FDAD8A67A22049A0A7F62E7F303BA0B8AFDC2826A77AC94A3D042F4C611FDE66B41E34B812CEB3CFB18 |
| [1658736497.595588][3787:3792] CHIP:TOO: Icac: 1530010100240201370324140018260480228127260580254D3A37062413011824070124080130094104650A6D674CF5E46402644A71D2BD59888911C9B997F5797369BAA8545057A2379DDA08AF05269B0C009AF76F940EA120DCBAF0E7720921A44C22DC07BF1BD44C370A3501290118240260300414574F6879804602B57796FB2D6F7212969A171E713005142D48B9286C5E218E5AD7EFFC31E492E297FCA12818300B40604E48C301208B4CA077AD7EEAB2DAFA2A728556A86D610234AD8200E7AE0D85836279320D5F3EFF97D573D53FC9D88B44103602FC3CA8574C844A8379BCC52C18 |
| [1658736497.595621][3787:3792] CHIP:TOO: FabricIndex: 1 |
| [1658736497.595662][3787:3792] CHIP:TOO: } |
| disabled: true |
| |
| - label: |
| "TH1 reads the TrustedRootCertificates attribute from the Node |
| Operational Credentials cluster" |
| verification: | |
| ./chip-tool operationalcredentials read trusted-root-certificates 1 0 |
| |
| Verify the value returned has a single entry |
| |
| [1658736567.913921][3938:3943] CHIP:TOO: Endpoint: 0 Cluster: 0x0000_003E Attribute 0x0000_0004 DataVersion: 999376603 |
| [1658736567.914057][3938:3943] CHIP:TOO: TrustedRootCertificates: 1 entries |
| [1658736567.914145][3938:3943] CHIP:TOO: [1]: 1530010100240201370324140018260480228127260580254D3A3706241400182407012408013009410470D319542F3A50625EF977E66A1277F3E50FCFF4516A5162E25016CB4E170A4D62562797E12184EB9A88A0160697122C9E473B7AA7F776E239CCB4420A82D4FE370A35012901182402603004142D48B9286C5E218E5AD7EFFC31E492E297FCA1283005142D48B9286C5E218E5AD7EFFC31E492E297FCA12818300B40C7EB3A1BA993A52EBC1D2E16C763CD9C9E4BDD82B166084FA72B5DF73437E9EB257271E09C69A8DEB6A2C09D42F833A788FD0E4092F0DA7229992B31587EE9DF18 |
| disabled: true |
| |
| - label: |
| "TH1 sends the UpdateNOC command to the Node Operational Credentials |
| cluster with the following fields: NOCValue is set to noc_original |
| ICACValue is to set icac_original" |
| PICS: OPCREDS.S.C07.Rsp |
| verification: | |
| Verify that the DUT responds with FAILSAFE_REQUIRED |
| |
| ./chip-tool operationalcredentials update-noc hex:1530010101240201370324130118260480228127260580254D3A3706241501241101182407012408013009410410C15281FE7A04637C46E47E30948152C5F9481B6D62D08C9D476A3D44D26E20C704DCAE97FCA4612B17A2A9B16A2D78BF9220F63E9CD19C6589CFC4CE09FF90370A350128011824020136030402040118300414C8FF1A09BE17C6824D61DA88A603A7B180804009300514574F6879804602B57796FB2D6F7212969A171E7118300B40A969CA49361A3F69E3220B19583F05F6D6B2D156AFE1992FDAD8A67A22049A0A7F62E7F303BA0B8AFDC2826A77AC94A3D042F4C611FDE66B41E34B812CEB3CFB18 1 0 |
| |
| [1658736631.224352][4080:4085] CHIP:DMG: ICR moving to [ResponseRe] |
| [1658736631.224399][4080:4085] CHIP:DMG: InvokeResponseMessage = |
| [1658736631.224425][4080:4085] CHIP:DMG: { |
| [1658736631.224450][4080:4085] CHIP:DMG: suppressResponse = false, |
| [1658736631.224476][4080:4085] CHIP:DMG: InvokeResponseIBs = |
| [1658736631.224506][4080:4085] CHIP:DMG: [ |
| [1658736631.224531][4080:4085] CHIP:DMG: InvokeResponseIB = |
| [1658736631.224563][4080:4085] CHIP:DMG: { |
| [1658736631.224589][4080:4085] CHIP:DMG: CommandStatusIB = |
| [1658736631.224618][4080:4085] CHIP:DMG: { |
| [1658736631.224665][4080:4085] CHIP:DMG: CommandPathIB = |
| [1658736631.224706][4080:4085] CHIP:DMG: { |
| [1658736631.224739][4080:4085] CHIP:DMG: EndpointId = 0x0, |
| [1658736631.224776][4080:4085] CHIP:DMG: ClusterId = 0x3e, |
| [1658736631.224807][4080:4085] CHIP:DMG: CommandId = 0x7, |
| [1658736631.224843][4080:4085] CHIP:DMG: }, |
| [1658736631.224876][4080:4085] CHIP:DMG: |
| [1658736631.224906][4080:4085] CHIP:DMG: StatusIB = |
| [1658736631.224940][4080:4085] CHIP:DMG: { |
| [1658736631.224977][4080:4085] CHIP:DMG: status = 0xca (FAILSAFE_REQUIRED), |
| [1658736631.225012][4080:4085] CHIP:DMG: }, |
| [1658736631.225046][4080:4085] CHIP:DMG: |
| [1658736631.225075][4080:4085] CHIP:DMG: }, |
| [1658736631.225109][4080:4085] CHIP:DMG: |
| [1658736631.225134][4080:4085] CHIP:DMG: }, |
| [1658736631.225165][4080:4085] CHIP:DMG: |
| [1658736631.225189][4080:4085] CHIP:DMG: ], |
| [1658736631.225218][4080:4085] CHIP:DMG: |
| [1658736631.225243][4080:4085] CHIP:DMG: InteractionModelRevision = 1 |
| [1658736631.225271][4080:4085] CHIP:DMG: }, |
| [1658736631.225332][4080:4085] CHIP:DMG: Received Command Response Status for Endpoint=0 Cluster=0x0000_003E Command=0x0000_0007 Status=0xca |
| [1658736631.225367][4080:4085] CHIP:TOO: Error: IM Error 0x000005CA: General error: 0xca (FAILSAFE_REQUIRED) |
| disabled: true |
| |
| - label: |
| "TH1 sends ArmFailSafe command to the DUT with the ExpiryLengthSeconds |
| field set to 900" |
| verification: | |
| ./chip-tool generalcommissioning arm-fail-safe 900 0 1 0 |
| |
| Verify the ArmFailSafeResponse with the ErrorCode set to OK is returned |
| |
| |
| [1658736675.488274][4129:4134] CHIP:DMG: Received Command Response Data, Endpoint=0 Cluster=0x0000_0030 Command=0x0000_0001 |
| [1658736675.488329][4129:4134] CHIP:TOO: Endpoint: 0 Cluster: 0x0000_0030 Command 0x0000_0001 |
| [1658736675.488401][4129:4134] CHIP:TOO: ArmFailSafeResponse: { |
| [1658736675.488441][4129:4134] CHIP:TOO: errorCode: 0 |
| [1658736675.488471][4129:4134] CHIP:TOO: debugText: |
| [1658736675.488496][4129:4134] CHIP:TOO: } |
| disabled: true |
| |
| - label: |
| "TH1 sends the UpdateNOC command to the Node Operational Credentials |
| cluster with the following fields: NOCValue is set to noc_original |
| ICACValue is to set icac_original" |
| PICS: OPCREDS.S.C07.Rsp |
| verification: | |
| Verify that the DUT responds with a NOCResponse with the StatusCode field set to MissingCsr that is status code 4 |
| |
| ./chip-tool operationalcredentials update-noc hex:1530010101240201370324130118260480228127260580254D3A3706241501241101182407012408013009410410C15281FE7A04637C46E47E30948152C5F9481B6D62D08C9D476A3D44D26E20C704DCAE97FCA4612B17A2A9B16A2D78BF9220F63E9CD19C6589CFC4CE09FF90370A350128011824020136030402040118300414C8FF1A09BE17C6824D61DA88A603A7B180804009300514574F6879804602B57796FB2D6F7212969A171E7118300B40A969CA49361A3F69E3220B19583F05F6D6B2D156AFE1992FDAD8A67A22049A0A7F62E7F303BA0B8AFDC2826A77AC94A3D042F4C611FDE66B41E34B812CEB3CFB18 1 0 |
| |
| [1658736892.440441][4160:4170] CHIP:TOO: Endpoint: 0 Cluster: 0x0000_003E Command 0x0000_0008 |
| [1658736892.440714][4160:4170] CHIP:TOO: NOCResponse: { |
| [1658736892.440945][4160:4170] CHIP:TOO: statusCode: 4 |
| [1658736892.441000][4160:4170] CHIP:TOO: } |
| [1658736892.441078][4160:4170] CHIP:DMG: ICR moving to [AwaitingDe] |
| disabled: true |
| |
| - label: |
| "TH1 Sends CSRRequest command with the IsForUpdateNOC field set to |
| false" |
| PICS: OPCREDS.S.C04.Rsp |
| verification: | |
| Verify that the DUT returns a CSRResponse and save as csr_not_update |
| |
| To get csr nonce give below command 2 times in TH(chip-tool) Log |
| echo hex:$(hexdump -vn32 -e"4/4 "%08X" " /dev/urandom) |
| |
| ./chip-tool operationalcredentials csrrequest hex:C11D6EAA00A54066220DA7F3FC5DC0F684C13D8B8FD3758B51163C2AEDD6F10F 1 0 --IsForUpdateNOC 0 |
| |
| Verify DUT returns a CSRResponse in TH(chip-tool) Log |
| [1658743641.233113][9670:9675] CHIP:DMG: Received Command Response Data, Endpoint=0 Cluster=0x0000_003E Command=0x0000_0005 |
| [1658743641.233162][9670:9675] CHIP:TOO: Endpoint: 0 Cluster: 0x0000_003E Command 0x0000_0005 |
| [1658743641.233226][9670:9675] CHIP:TOO: CSRResponse: { |
| [1658743641.233269][9670:9675] CHIP:TOO: NOCSRElements: 153001CA3081C73070020100300E310C300A060355040A0C034353523059301306072A8648CE3D020106082A8648CE3D03010703420004D3C12FD39A573184AC822E12F9D76C43EA3872B8D541BF0DCF68FF33AF7E62E71ADB4D4F35AA9E206D00CC290CCA1BAD557537A05BA8D3BAD1B7F3EE323B2CE9A000300A06082A8648CE3D04030203470030440220232B91662198D24E57F5967A06C0A554991CAA02D958D507AAAABB41450AD39002204575858E909DCE43563F33725928FF2AA01A176CECF611F9B248CD9D2CBC76CA300220C11D6EAA00A54066220DA7F3FC5DC0F684C13D8B8FD3758B51163C2AEDD6F10F18 |
| [1658743641.233306][9670:9675] CHIP:TOO: attestationSignature: 2D4052E30061B78A79B5C2D392C93BEFADE17BA5F3547776A545D4913EC935CF446C9105E9F203BF898BF17F87106E63AD8E93E894C5398CAC344F7D6ECE27F6 |
| disabled: true |
| |
| - label: |
| "TH1 generates a new NOC chain with ICAC with the following |
| properties: new NOC is generated from the NOCSR returned in |
| csr_not_for_update and is signed by ICA. Save as noc_not_for_update |
| ICAC must be signed by the original key for trusted_root_original. |
| Save as icac_not_for_update" |
| verification: | |
| |
| disabled: true |
| |
| - label: |
| "TH1 sends the UpdateNOC command to the Node Operational Credentials |
| cluster with the following fields: NOCValue is set to |
| noc_not_for_update ICACValue is to set icac_not_for_update" |
| PICS: OPCREDS.S.C07.Rsp |
| verification: | |
| |
| disabled: true |
| |
| - label: |
| "TH1 Sends CSRRequest command with the IsForUpdateNOC field set to |
| true" |
| PICS: OPCREDS.S.C04.Rsp |
| verification: | |
| |
| disabled: true |
| |
| - label: |
| "TH1 sends the UpdateNOC command to the Node Operational Credentials |
| cluster with the following fields: NOCValue is set to noc_original |
| ICACValue is to set icac_original" |
| PICS: OPCREDS.S.C07.Rsp |
| verification: | |
| |
| disabled: true |
| |
| - label: |
| "TH1 generates a new Trusted Root Certificate and Private Key and |
| saves as new_root_cert and new_root_key so that TH can generate an NOC |
| for UpdateNOC that doesnt chain to the original root" |
| verification: | |
| |
| disabled: true |
| |
| - label: |
| "TH1 generates a new NOC and ICAC with the following properties: new |
| NOC is generated from the NOCSR returned in csr_update and is signed |
| by new ICA. Save as noc_update_new_root new ICAC is generated and |
| signed by new_root_key. Save as icac_update_new_root" |
| verification: | |
| |
| disabled: true |
| |
| - label: |
| "TH1 sends the UpdateNOC command to the Node Operational Credentials |
| cluster with the following fields: NOCValue is set to |
| noc_update_new_root ICACValue is to set icac_update_new_root" |
| PICS: OPCREDS.S.C07.Rsp |
| verification: | |
| |
| disabled: true |
| |
| - label: |
| "TH1 generates a new NOC and ICAC with the following properties: new |
| NOC is generated from the NOCSR returned in csr_update with the |
| matter-fabric-id set to a different value than noc_original. The NOC |
| is signed by new ICA. Save as noc_update_bad_fabric_on_noc new ICAC is |
| generated with the and matter-fabric-id omitted. ICAC is signed by the |
| original key for trusted_root_original. Save as |
| icac_update_bad_fabric_on_noc" |
| verification: | |
| |
| disabled: true |
| |
| - label: |
| "TH1 sends the UpdateNOC command to the Node Operational Credentials |
| cluster with the following fields: NOCValue is set to |
| noc_update_bad_fabric_on_noc ICACValue is to set |
| icac_update_bad_fabric_on_noc" |
| PICS: OPCREDS.S.C07.Rsp |
| verification: | |
| |
| disabled: true |
| |
| - label: |
| "TH1 generates a new NOC and ICAC with the following properties: new |
| NOC is generated from the NOCSR returned in csr_update with the |
| matter-fabric-id set to the same value as noc_original. The NOC is |
| signed by new ICA. Save as noc_update_bad_fabric_on_icac new ICAC is |
| generated with the and matter-fabric-id included as set to a different |
| value than noc_original. ICAC is signed by the original key for |
| trusted_root_original. Save as icac_update_bad_fabric_on_icac" |
| verification: | |
| |
| disabled: true |
| |
| - label: |
| "TH1 sends the UpdateNOC command to the Node Operational Credentials |
| cluster with the following fields: NOCValue is set to |
| noc_update_bad_fabric_on_icac ICACValue is to set |
| icac_update_bad_fabric_on_icac" |
| PICS: OPCREDS.S.C07.Rsp |
| verification: | |
| |
| disabled: true |
| |
| - label: |
| "TH1 sends AddTrustedRootCertificate command to DUT again with the |
| RootCACertificate field set to new_root_cert" |
| PICS: OPCREDS.S.C0b.Rsp |
| verification: | |
| |
| disabled: true |
| |
| - label: |
| "TH1 sends the UpdateNOC command to the Node Operational Credentials |
| cluster with the following fields: NOCValue is set to |
| noc_update_new_root ICACValue is to set icac_update_new_root" |
| PICS: OPCREDS.S.C07.Rsp |
| verification: | |
| |
| disabled: true |
| |
| - label: |
| "TH1 sends ArmFailSafe command to the DUT with the ExpiryLengthSeconds |
| field set to 0" |
| verification: | |
| |
| disabled: true |
| |
| - label: "TH1 sends an OpenCommissioningWindow command to the DUT" |
| verification: | |
| |
| disabled: true |
| |
| - label: |
| "TH1 connects to the DUT over PASE and sends ArmFailSafe command to |
| the DUT with the ExpiryLengthSeconds field set to 900. Steps 24-26 are |
| all performed over the PASE connection." |
| verification: | |
| |
| disabled: true |
| |
| - label: |
| "TH1 Sends CSRRequest command over PASE with the IsForUpdateNOC field |
| set to true" |
| PICS: OPCREDS.S.C04.Rsp |
| verification: | |
| |
| disabled: true |
| |
| - label: |
| "TH1 generates a new NOC chain with ICAC with the following |
| properties: new NOC is generated from the NOCSR returned in csr_pase |
| and is signed by ICA. Save as noc_pase ICAC must be signed by the |
| original key for trusted_root_original. Save as icac_pase" |
| verification: | |
| |
| disabled: true |
| |
| - label: |
| "TH1 sends the UpdateNOC command to the Node Operational Credentials |
| cluster over PASE with the following fields: NOCValue is set to |
| noc_pase ICACValue is to set icac_pase" |
| PICS: OPCREDS.S.C07.Rsp |
| verification: | |
| |
| disabled: true |
