ExternalVendorCode/go-attestation
1
0
Fork 0
mirror of https://github.com/google/go-attestation.git synced 2024-12-22 14:22:28 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
3538e3d287
go-attestation/attributecert/testdata/Intel_pc1.cer.json

168 lines
6.2 KiB
JSON
Raw Normal View History

First attempt at adding support for attribute certificates (#117) Platform certificates are defined as RFC5755 attribute certificates with various additional attributes and extensions defined in the TCG Platform Certificate Profile. Add support for parsing them, derived from crypto/x509. Include some test certificates and verify we parse them.
2019-10-28 06:12:15 +00:00
{
"Raw": "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",
"RawTBSAttributeCertificate": "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",
"Signature": "Ql9rIgPsbGUfPaOEFqOdubTZVKRfsdE5bQeavnKeYpkpfPtXqXFVm7KeE+Gqu/XpnBGWj+17U84/THGoieiTFoqQwF8PDZNrjX6HUxxhZ0nbZHaE3S5DC2+zti8oZAfpm37C0ghgUoxOTbPHYXvDId8eDl+N9gHLJXvelB5DywqO0rnvHpWHLD+uWnGV4WnRTAW9YFG6Gu7UguUyLKWNCc2Zee+MFmGYyDunJDosebk0a5KruMFOOulQ1esuI8vvHxJJgZSaQTfr5S2w9MHo3VFen/CiLOhS+oXHZI0WDznzkehodGYLf6qe0VCjbwIQsoq2+ED8xh2BzU9v/xGyqA==",
Fix attribute certificate signature handling Attribute certificates are generally using RSA-SHA1 or RSA-SHA256 signatures, so include those. In addition, the CA signing restrictions imposed for general purpose certificates don't apply here - drop that restriction from certificate signature validation.
2020-05-06 22:21:05 +00:00
"SignatureAlgorithm": 3,
First attempt at adding support for attribute certificates (#117) Platform certificates are defined as RFC5755 attribute certificates with various additional attributes and extensions defined in the TCG Platform Certificate Profile. Add support for parsing them, derived from crypto/x509. Include some test certificates and verify we parse them.
2019-10-28 06:12:15 +00:00
"Version": 2,
"SerialNumber": 1,
"Holder": {
"Issuer": {
"Country": null,
"Organization": null,
"OrganizationalUnit": null,
"Locality": null,
"Province": null,
"StreetAddress": null,
"PostalCode": null,
"SerialNumber": "",
"CommonName": "STMicro",
"Names": [
{
"Type": [
2,
5,
4,
3
],
"Value": "STMicro"
}
],
"ExtraNames": null
},
"Serial": 449600017855339869538679649152375580078880538087
},
"Issuer": {
"Country": [
"US"
],
"Organization": [
"Intel Corporation"
],
"OrganizationalUnit": [
"TrustedSupplyChain"
],
"Locality": [
"Santa Clara"
],
"Province": [
"California"
],
"StreetAddress": null,
"PostalCode": null,
"SerialNumber": "",
"CommonName": "www.intel.com",
"Names": [
{
"Type": [
2,
5,
4,
3
],
"Value": "www.intel.com"
},
{
"Type": [
2,
5,
4,
11
],
"Value": "TrustedSupplyChain"
},
{
"Type": [
2,
5,
4,
10
],
"Value": "Intel Corporation"
},
{
"Type": [
2,
5,
4,
7
],
"Value": "Santa Clara"
},
{
"Type": [
2,
5,
4,
8
],
"Value": "California"
},
{
"Type": [
2,
5,
4,
6
],
"Value": "US"
}
],
"ExtraNames": null
},
"Subject": {
"Country": null,
"Organization": null,
"OrganizationalUnit": null,
"Locality": null,
"Province": null,
"StreetAddress": null,
"PostalCode": null,
"SerialNumber": "",
"CommonName": "",
"Names": null,
"ExtraNames": null
},
"NotBefore": "2016-01-22T21:02:00Z",
"NotAfter": "2017-01-22T21:02:00Z",
"TCGPlatformSpecification": {
"Version": {
"MajorVersion": 1,
"MinorVersion": 2,
"Revision": 1
}
},
"TBBSecurityAssertions": {
"Version": 1,
"CcInfo": {
"Version": "CC Version",
"AssuranceLevel": 7,
"EvaluationStatus": 2,
"Plus": false,
"StrengthOfFunction": 1,
"ProfileOid": null,
Fix broken tag statements A number of the struct definitions had broken tag definitions, which meant some parsing was working by accident and some parsing was entirely broken. Fixing this uncovered some additional issues (a mixture of incorrect definitions and platform certificates that violate the spec), so this is all cleaned up as well.
2020-05-08 19:15:58 +00:00
"ProfileURI": "",
First attempt at adding support for attribute certificates (#117) Platform certificates are defined as RFC5755 attribute certificates with various additional attributes and extensions defined in the TCG Platform Certificate Profile. Add support for parsing them, derived from crypto/x509. Include some test certificates and verify we parse them.
2019-10-28 06:12:15 +00:00
"TargetOid": null,
Fix broken tag statements A number of the struct definitions had broken tag definitions, which meant some parsing was working by accident and some parsing was entirely broken. Fixing this uncovered some additional issues (a mixture of incorrect definitions and platform certificates that violate the spec), so this is all cleaned up as well.
2020-05-08 19:15:58 +00:00
"TargetURI": null
First attempt at adding support for attribute certificates (#117) Platform certificates are defined as RFC5755 attribute certificates with various additional attributes and extensions defined in the TCG Platform Certificate Profile. Add support for parsing them, derived from crypto/x509. Include some test certificates and verify we parse them.
2019-10-28 06:12:15 +00:00
},
"FipsLevel": {
"Version": "",
"Level": 0,
"Plus": false
},
"RtmType": 2,
"Iso9000Certified": true,
Fix broken tag statements A number of the struct definitions had broken tag definitions, which meant some parsing was working by accident and some parsing was entirely broken. Fixing this uncovered some additional issues (a mixture of incorrect definitions and platform certificates that violate the spec), so this is all cleaned up as well.
2020-05-08 19:15:58 +00:00
"Iso9000URI": "URL to iso9000 certificate"
First attempt at adding support for attribute certificates (#117) Platform certificates are defined as RFC5755 attribute certificates with various additional attributes and extensions defined in the TCG Platform Certificate Profile. Add support for parsing them, derived from crypto/x509. Include some test certificates and verify we parse them.
2019-10-28 06:12:15 +00:00
},
"PlatformManufacturer": "Intel",
"PlatformModel": "S2600KP",
"PlatformVersion": "H76962-350",
"PlatformSerial": "BQKP52840678",
"CredentialSpecification": "",
"UserNotice": {
"NoticeRef": {
"Organization": "Credential Type Label",
"NoticeNumbers": []
},
"ExplicitText": "TCPA Trusted Platform Endorsement"
}
Fix broken tag statements A number of the struct definitions had broken tag definitions, which meant some parsing was working by accident and some parsing was entirely broken. Fixing this uncovered some additional issues (a mixture of incorrect definitions and platform certificates that violate the spec), so this is all cleaned up as well.
2020-05-08 19:15:58 +00:00
}
Reference in New Issue Copy Permalink