-
Notifications
You must be signed in to change notification settings - Fork 6
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[16881] Secure DS test suite #62
base: master
Are you sure you want to change the base?
Changes from 6 commits
9f309bc
b4c445e
ae96083
cb1a7d9
9c2236c
46046d6
3e1ac75
018f817
51c734e
03060a2
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,81 @@ | ||
MIME-Version: 1.0 | ||
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg="sha-256"; boundary="----C5F52FFDC6C8C099D91B23188E515C2E" | ||
|
||
This is an S/MIME signed message | ||
|
||
------C5F52FFDC6C8C099D91B23188E515C2E | ||
Content-Type: text/plain | ||
|
||
<?xml version="1.0" encoding="utf-8"?> | ||
<dds xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" | ||
xsi:noNamespaceSchemaLocation="omg_shared_ca_domain_governance.xsd"> | ||
<domain_access_rules> | ||
<domain_rule> | ||
<domains> | ||
<id_range> | ||
<min>0</min> | ||
<max>230</max> | ||
</id_range> | ||
</domains> | ||
<allow_unauthenticated_participants>false</allow_unauthenticated_participants> | ||
<enable_join_access_control>true</enable_join_access_control> | ||
<discovery_protection_kind>ENCRYPT</discovery_protection_kind> | ||
<liveliness_protection_kind>ENCRYPT</liveliness_protection_kind> | ||
<rtps_protection_kind>ENCRYPT</rtps_protection_kind> | ||
<topic_access_rules> | ||
<topic_rule> | ||
<topic_expression>*</topic_expression> | ||
<enable_discovery_protection>true</enable_discovery_protection> | ||
<enable_liveliness_protection>true</enable_liveliness_protection> | ||
<enable_read_access_control>true</enable_read_access_control> | ||
<enable_write_access_control>true</enable_write_access_control> | ||
<metadata_protection_kind>ENCRYPT</metadata_protection_kind> | ||
<data_protection_kind>ENCRYPT</data_protection_kind> | ||
</topic_rule> | ||
<topic_rule> | ||
<topic_expression>topic*</topic_expression> | ||
<enable_discovery_protection>true</enable_discovery_protection> | ||
<enable_liveliness_protection>true</enable_liveliness_protection> | ||
<enable_read_access_control>false</enable_read_access_control> | ||
<enable_write_access_control>false</enable_write_access_control> | ||
<metadata_protection_kind>ENCRYPT</metadata_protection_kind> | ||
<data_protection_kind>ENCRYPT</data_protection_kind> | ||
</topic_rule> | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Wha's the rationale behind this distinction? Why disable access control for reading and writing on topic* ? There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. The second topic rule makes no sense. The idea is to have all the protections enabled for all topics |
||
</topic_access_rules> | ||
</domain_rule> | ||
</domain_access_rules> | ||
</dds> | ||
|
||
|
||
------C5F52FFDC6C8C099D91B23188E515C2E | ||
Content-Type: application/x-pkcs7-signature; name="smime.p7s" | ||
Content-Transfer-Encoding: base64 | ||
Content-Disposition: attachment; filename="smime.p7s" | ||
|
||
MIIEeQYJKoZIhvcNAQcCoIIEajCCBGYCAQExDzANBglghkgBZQMEAgEFADALBgkq | ||
hkiG9w0BBwGgggJAMIICPDCCAeOgAwIBAgIJALZwpgo2sxthMAoGCCqGSM49BAMC | ||
MIGaMQswCQYDVQQGEwJFUzELMAkGA1UECAwCTUExFDASBgNVBAcMC1RyZXMgQ2Fu | ||
dG9zMREwDwYDVQQKDAhlUHJvc2ltYTERMA8GA1UECwwIZVByb3NpbWExHjAcBgNV | ||
BAMMFWVQcm9zaW1hIE1haW4gVGVzdCBDQTEiMCAGCSqGSIb3DQEJARYTbWFpbmNh | ||
QGVwcm9zaW1hLmNvbTAeFw0xNzA5MDYwOTAzMDNaFw0yNzA5MDQwOTAzMDNaMIGa | ||
MQswCQYDVQQGEwJFUzELMAkGA1UECAwCTUExFDASBgNVBAcMC1RyZXMgQ2FudG9z | ||
MREwDwYDVQQKDAhlUHJvc2ltYTERMA8GA1UECwwIZVByb3NpbWExHjAcBgNVBAMM | ||
FWVQcm9zaW1hIE1haW4gVGVzdCBDQTEiMCAGCSqGSIb3DQEJARYTbWFpbmNhQGVw | ||
cm9zaW1hLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABGLlhB3WQ8l1fpUE | ||
3DfOoulA/de38Zfj7hmpKtOnxiH2q6RJbwhxvJeA7R7mkmAKaJKmzx695BjyiXVS | ||
7bE7vgejEDAOMAwGA1UdEwQFMAMBAf8wCgYIKoZIzj0EAwIDRwAwRAIgVTY1BEvT | ||
4pw3GyBMzaUqmp69wi0kBkyOgq04OhyJ13UCICR125vvt0fUhXsXaxOAx28E4Ac9 | ||
SVxpI+3UYs2kV5n0MYIB/TCCAfkCAQEwgagwgZoxCzAJBgNVBAYTAkVTMQswCQYD | ||
VQQIDAJNQTEUMBIGA1UEBwwLVHJlcyBDYW50b3MxETAPBgNVBAoMCGVQcm9zaW1h | ||
MREwDwYDVQQLDAhlUHJvc2ltYTEeMBwGA1UEAwwVZVByb3NpbWEgTWFpbiBUZXN0 | ||
IENBMSIwIAYJKoZIhvcNAQkBFhNtYWluY2FAZXByb3NpbWEuY29tAgkAtnCmCjaz | ||
G2EwDQYJYIZIAWUDBAIBBQCggeQwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAc | ||
BgkqhkiG9w0BCQUxDxcNMjMwMjE2MTM1MzM4WjAvBgkqhkiG9w0BCQQxIgQgnYat | ||
+qpSujB+F1VkLqKebFVhML6kkDOYUJprAbUN++QweQYJKoZIhvcNAQkPMWwwajAL | ||
BglghkgBZQMEASowCwYJYIZIAWUDBAEWMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0D | ||
BzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZI | ||
hvcNAwICASgwCgYIKoZIzj0EAwIERzBFAiA1XSjy+b788/v9jfT9XyLB5nAaCQjB | ||
66R0cSiLCUrX8AIhAOv4hdmaTllVbs/zB4BZNt0Ikx1PAfudHMwfSN/EgeG9 | ||
|
||
------C5F52FFDC6C8C099D91B23188E515C2E-- | ||
|
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,40 @@ | ||
<?xml version="1.0" encoding="utf-8"?> | ||
<dds xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" | ||
xsi:noNamespaceSchemaLocation="omg_shared_ca_domain_governance.xsd"> | ||
<domain_access_rules> | ||
<domain_rule> | ||
<domains> | ||
<id_range> | ||
<min>0</min> | ||
<max>230</max> | ||
</id_range> | ||
</domains> | ||
<allow_unauthenticated_participants>false</allow_unauthenticated_participants> | ||
<enable_join_access_control>true</enable_join_access_control> | ||
<discovery_protection_kind>ENCRYPT</discovery_protection_kind> | ||
<liveliness_protection_kind>ENCRYPT</liveliness_protection_kind> | ||
<rtps_protection_kind>ENCRYPT</rtps_protection_kind> | ||
<topic_access_rules> | ||
<topic_rule> | ||
<topic_expression>*</topic_expression> | ||
<enable_discovery_protection>true</enable_discovery_protection> | ||
<enable_liveliness_protection>true</enable_liveliness_protection> | ||
<enable_read_access_control>true</enable_read_access_control> | ||
<enable_write_access_control>true</enable_write_access_control> | ||
<metadata_protection_kind>ENCRYPT</metadata_protection_kind> | ||
<data_protection_kind>ENCRYPT</data_protection_kind> | ||
</topic_rule> | ||
<topic_rule> | ||
<topic_expression>topic*</topic_expression> | ||
<enable_discovery_protection>true</enable_discovery_protection> | ||
<enable_liveliness_protection>true</enable_liveliness_protection> | ||
<enable_read_access_control>false</enable_read_access_control> | ||
<enable_write_access_control>false</enable_write_access_control> | ||
<metadata_protection_kind>ENCRYPT</metadata_protection_kind> | ||
<data_protection_kind>ENCRYPT</data_protection_kind> | ||
</topic_rule> | ||
</topic_access_rules> | ||
</domain_rule> | ||
</domain_access_rules> | ||
</dds> | ||
|
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,14 @@ | ||
-----BEGIN CERTIFICATE----- | ||
MIICPDCCAeOgAwIBAgIJALZwpgo2sxthMAoGCCqGSM49BAMCMIGaMQswCQYDVQQG | ||
EwJFUzELMAkGA1UECAwCTUExFDASBgNVBAcMC1RyZXMgQ2FudG9zMREwDwYDVQQK | ||
DAhlUHJvc2ltYTERMA8GA1UECwwIZVByb3NpbWExHjAcBgNVBAMMFWVQcm9zaW1h | ||
IE1haW4gVGVzdCBDQTEiMCAGCSqGSIb3DQEJARYTbWFpbmNhQGVwcm9zaW1hLmNv | ||
bTAeFw0xNzA5MDYwOTAzMDNaFw0yNzA5MDQwOTAzMDNaMIGaMQswCQYDVQQGEwJF | ||
UzELMAkGA1UECAwCTUExFDASBgNVBAcMC1RyZXMgQ2FudG9zMREwDwYDVQQKDAhl | ||
UHJvc2ltYTERMA8GA1UECwwIZVByb3NpbWExHjAcBgNVBAMMFWVQcm9zaW1hIE1h | ||
aW4gVGVzdCBDQTEiMCAGCSqGSIb3DQEJARYTbWFpbmNhQGVwcm9zaW1hLmNvbTBZ | ||
MBMGByqGSM49AgEGCCqGSM49AwEHA0IABGLlhB3WQ8l1fpUE3DfOoulA/de38Zfj | ||
7hmpKtOnxiH2q6RJbwhxvJeA7R7mkmAKaJKmzx695BjyiXVS7bE7vgejEDAOMAwG | ||
A1UdEwQFMAMBAf8wCgYIKoZIzj0EAwIDRwAwRAIgVTY1BEvT4pw3GyBMzaUqmp69 | ||
wi0kBkyOgq04OhyJ13UCICR125vvt0fUhXsXaxOAx28E4Ac9SVxpI+3UYs2kV5n0 | ||
-----END CERTIFICATE----- |
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,5 @@ | ||
-----BEGIN PRIVATE KEY----- | ||
MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgRaipe1KYZNzj+35E | ||
N2jvtzjRsQ7n9Me/vm35UKGuVI6hRANCAARi5YQd1kPJdX6VBNw3zqLpQP3Xt/GX | ||
4+4ZqSrTp8Yh9qukSW8IcbyXgO0e5pJgCmiSps8eveQY8ol1Uu2xO74H | ||
-----END PRIVATE KEY----- |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Maybe we could be a little more specific on what the failure is with a LOG_ERROR (missing name/value)