tpsclient code for EC support tpsclientEC.diff
ECC apdu header file needed to compile Generate_Key_ECC_APDU.h
file containing token name tokenname
cfuECCtest ECC CRMF test sample enroll.tps.ec
two parameters are added in the config file (see enroll.tps.ec for example): slotnamefile - this points to a file that contains the slot name. The reason why the slot name goes into another file instead of the conf file is because the existing conf file uses spaces for deliminator and I don't want to change the usage (and QE's tests) by changing it to something else. tokpasswod is the tokebn password
This ECC feature requires the up-coming ECC supporting TPS to trigger. Testing of the ECC specific areas requires the availability of such ECC TPS. Without it, one can test with the old RSA method to see if it's broken. In addition to testing for ECC and RSA functionality in regards to tpsclient, I also tested it against the up coming DRM/TPS for server-side key generation and archival ECC support. Read my updated ECC setup instruction on how to set this up: https://wiki.idm.lab.bos.redhat.com/export/idmwiki/Working_with_ECC#Key_Archival_and_Recovery_in_TMS_.28Server-Side_key_generation.29
new patch for .cpp files that reflects review comments tpsclientEC.diff2
Generate_Key_ECC_APDU Generate_Key_ECC_APDU.cpp
committing per verbal ack from Jack.
8.1 ECC Errata $ svn commit src/include/apdu/Generate_Key_ECC_APDU.h src/apdu/Generate_Key_ECC_APDU.cpp tools/raclient/RA_Conn.cpp tools/raclient/RA_Token.h tools/raclient/RA_Token.cpp Enter passphrase for key '/home/cfu/.ssh/id_rsa': Adding src/apdu/Generate_Key_ECC_APDU.cpp Adding src/include/apdu/Generate_Key_ECC_APDU.h Sending tools/raclient/RA_Conn.cpp Sending tools/raclient/RA_Token.cpp Sending tools/raclient/RA_Token.h Transmitting file data ..... Committed revision 2456.
missed one file $ svn commit APDU.h Sending APDU.h Transmitting file data . Committed revision 2457
also needed for new file tps]$ svn commit Makefile.am Makefile.in Sending Makefile.am Sending Makefile.in Transmitting file data .. Committed revision 2458.
Example for EC supporting tpsclient RHCS81 Errata tree: $ svn commit enroll.tps.ec Adding enroll.tps.ec Transmitting file data . Committed revision 2460.
RHCS 8.2 tree: tps]$ svn commit Sending tps/Makefile.am Sending tps/Makefile.in Adding tps/src/apdu/Generate_Key_ECC_APDU.cpp Sending tps/src/include/apdu/APDU.h Adding tps/src/include/apdu/Generate_Key_ECC_APDU.h Sending tps/tools/raclient/RA_Conn.cpp Sending tps/tools/raclient/RA_Token.cpp Sending tps/tools/raclient/RA_Token.h Transmitting file data ........ Committed revision 2459.
raclient]$ svn commit enroll.tps.ec Adding enroll.tps.ec Transmitting file data . Committed revision 2461.
Metadata Update from @nkinder: - Issue assigned to cfu - Issue set to the milestone: ECC Effort
Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.
This issue has been cloned to GitHub and is available here: https://github.com/dogtagpki/pki/issues/808
If you want to receive further updates on the issue, please navigate to the GitHub issue and click on Subscribe button.
Subscribe
Thank you for understanding, and we apologize for any inconvenience.