#237 Add ECC support for tpsclient
Closed: Fixed Opened by nkinder.

No Description Provided


tpsclient code for EC support
tpsclientEC.diff

ECC apdu header file needed to compile
Generate_Key_ECC_APDU.h

file containing token name
tokenname

cfuECCtest ECC CRMF test sample
enroll.tps.ec

two parameters are added in the config file (see enroll.tps.ec for example):
slotnamefile - this points to a file that contains the slot name. The reason why the slot name goes into another file instead of the conf file is because the existing conf file uses spaces for deliminator and I don't want to change the usage (and QE's tests) by changing it to something else.
tokpasswod is the tokebn password

This ECC feature requires the up-coming ECC supporting TPS to trigger. Testing of the ECC specific areas requires the availability of such ECC TPS. Without it, one can test with the old RSA method to see if it's broken.
In addition to testing for ECC and RSA functionality in regards to tpsclient, I also tested it against the up coming DRM/TPS for server-side key generation and archival ECC support.
Read my updated ECC setup instruction on how to set this up:
https://wiki.idm.lab.bos.redhat.com/export/idmwiki/Working_with_ECC#Key_Archival_and_Recovery_in_TMS_.28Server-Side_key_generation.29

new patch for .cpp files that reflects review comments
tpsclientEC.diff2

committing per verbal ack from Jack.

8.1 ECC Errata
$ svn commit src/include/apdu/Generate_Key_ECC_APDU.h src/apdu/Generate_Key_ECC_APDU.cpp tools/raclient/RA_Conn.cpp tools/raclient/RA_Token.h tools/raclient/RA_Token.cpp
Enter passphrase for key '/home/cfu/.ssh/id_rsa':
Adding src/apdu/Generate_Key_ECC_APDU.cpp
Adding src/include/apdu/Generate_Key_ECC_APDU.h
Sending tools/raclient/RA_Conn.cpp
Sending tools/raclient/RA_Token.cpp
Sending tools/raclient/RA_Token.h
Transmitting file data .....
Committed revision 2456.

missed one file
$ svn commit APDU.h
Sending APDU.h
Transmitting file data .
Committed revision 2457

also needed for new file
tps]$ svn commit Makefile.am Makefile.in
Sending Makefile.am
Sending Makefile.in
Transmitting file data ..
Committed revision 2458.

Example for EC supporting tpsclient
RHCS81 Errata tree:
$ svn commit enroll.tps.ec
Adding enroll.tps.ec
Transmitting file data .
Committed revision 2460.

RHCS 8.2 tree:
tps]$ svn commit
Sending tps/Makefile.am
Sending tps/Makefile.in
Adding tps/src/apdu/Generate_Key_ECC_APDU.cpp
Sending tps/src/include/apdu/APDU.h
Adding tps/src/include/apdu/Generate_Key_ECC_APDU.h
Sending tps/tools/raclient/RA_Conn.cpp
Sending tps/tools/raclient/RA_Token.cpp
Sending tps/tools/raclient/RA_Token.h
Transmitting file data ........
Committed revision 2459.

raclient]$ svn commit enroll.tps.ec
Adding enroll.tps.ec
Transmitting file data .
Committed revision 2461.

Metadata Update from @nkinder:
- Issue assigned to cfu
- Issue set to the milestone: ECC Effort

Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new
issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.

This issue has been cloned to GitHub and is available here:
https://github.com/dogtagpki/pki/issues/808

If you want to receive further updates on the issue, please navigate to the
GitHub issue and click on Subscribe button.

Thank you for understanding, and we apologize for any inconvenience.

Metadata