zero-lab: ti-cli 0.2.0, TSL signature verification and certificate types from the TSL

gematik.github.io

• Branch master: 1 new commit (3652e4b, "created new html pages"), 2 files changed (30 insertions, 30 deletions).

zero-lab

New tag/release: rust/ti-cli/v0.2.0 (commit 7068745, "ti-cli: release 0.2.0").

Branch main: 26 new commits, 152 files changed (14,347 insertions, 537 deletions). Pull requests #36, #37, #38 and #39 are included.

TSL signature verification (PR #36, feat/rust-ti-xmldsig)

• New crate ti-xmldsig with strict, bounded XML parsing (TSLSIG-001) and Exclusive C14N 1.0 (TSLSIG-016).
• TSL signature profile and digests (TSLSIG-010 – 023) in ti-xmldsig.
• ti-pki: TSL signature verification (TSLSIG-012, 018, 020, 022).
• ti-pki and ti-cli: TSL signer under the TSL signer CA per environment (TSLSIG-030 – 035), signer status, update rules and verified loading (TSLSIG-040 – 055), signer CAs as a list and reporting of announced CAs (TSLSIG-030, 060).
• Reporting of problems with TSL state files; tests in all feature combinations.
• Recorded OCSP responses for the TSL signers; OCSP responders from the verified TSL listed; TSL in the trust tree.
• Specification: TSL XMLDSig requirements and conformance (spec); documentation with links to the gematik specifications that the TSL work follows.

Certificate types and OCSP (PR #37, #38)

• ti-pki, ti-cli: certificate types per CA from the verified TSL (TUC_PKI_007).
• ti-pki: generated OCSP responses for the TSL signer (all TSLSIG-041 outcomes).

CLI

• ti-cli: --env and TI_ENV for every command that requires an environment.
• ti-cli: all name attributes in pki inspect labeled, hex-encoded values decoded; multi-valued RDN names.

Reports and WebAssembly (PR #39, feat/ti-wasm)

• New crate ti-report with shared certificate and TSL reports; ti-pki: TSL scheme information.
• ti-wasm: verified TSL view and certificate reports as WebAssembly; TrustContext with offline certificate checks against a verified TSL.
• ti-pki: OIDs for CV certificate types (oid_cv_rootcert, oid_cv_cert); Extended Key Usage of the TSL signer named id-tsl-kp-tslSigning.

At a glance

• zero-lab: tag rust/ti-cli/v0.2.0 (ti-cli 0.2.0).
• zero-lab: 26 commits on main, 152 files, +14,347/−537 lines, four merged pull requests (#36–#39).
• zero-lab: new crates ti-xmldsig, ti-report and ti-wasm; TSL signature verification according to TSLSIG requirements.
• zero-lab: certificate types per CA from the verified TSL (TUC_PKI_007) and OCSP responses for the TSL signer.
• gematik.github.io: 1 commit on master, 2 files changed.