Uploaded image for project: 'Vnfsdk'
  1. Vnfsdk
  2. VNFSDK-595

Rule R130206 should looks for ETSI-Entry-Certificate definition in Tosca.meta file depend on CMS signature (with or without cert) and Tosca.meta file existence in csar

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Done
    • Icon: Medium Medium
    • Guilin Release
    • None
    • None

      1. When CMS signature in manifest file doesn't contain certificate then:
        1. If TOSCA-Metadata/TOSCA.meta exists in csar package, then certifcate should be present i csar package in place indicated by the tag ETSI-Entry-Certificate: <path to cert>pnf_main_descriptor.cert - if it is not present then report error "Unable to find cert file defined by ETSI-Entry-Certificate!"
        2. If TOSCA-Metadata/TOSCA.meta doesn't exists in csar package ( https://www.etsi.org/deliver/etsi_gs/NFV-SOL/001_099/004/02.07.01_60/gs_NFV-SOL004v020701p.pdf chapter 4.3.6 point 2) then certificate should be in csar root folder. Certificate name should be like <tosca definitins main yaml name>.cert - if it is not present then report error "Unable to find cert file defined by ETSI-Entry-Certificate!"
      2. When CMS signature in manifest contains certificate then rule should check if by mistake certificate hasn't be added to csar file.
        1. If TOSCA-Metadata/TOSCA.meta exists then rule should check if exists:
          1. tag ETSI-Entry-Certificate: <path to cert>pnf_main_descriptor.cert> - if yes then report error "ETSI-Entry-Certificate entry in Tosca.meta is defined despite the certificate is included in the signature container"
          2. csar package in place indicated by the tag ETSI-Entry-Certificate: <path to cert>pnf_main_descriptor.cert - if yes then report error "ETSI-Entry-Certificate certificate present despite the certificate is included in the signature container"
        2. If TOSCA-Metadata/TOSCA.meta doesn't exists then in csar root folder shouldn't be present file <tosca definitins main yaml name>.cert - if yes then report error "ETSI-Entry-Certificate certificate present despite the certificate is included in the signature container"

            amaciaga amaciaga
            kkuzmick kkuzmick
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: