OPTIGA device Data Object Boundary Exceeded - after storing ECC Private&Public key #22

Kitty-Hawk1 · 2021-11-03T17:27:27Z

Kitty-Hawk1
Nov 3, 2021

Why is the data boundary exceeded ?

Read Chip Info [0xE0C2]: Success.
========================================================
CIM Identifier             [bCimIdentifer]: 0xcd
Platform Identifer   [bPlatformIdentifier]: 0x16
Model Identifer         [bModelIdentifier]: 0x33
ID of ROM mask                  [wROMCode]: 0x8401
Chip Type                    [rgbChipType]: 0x00 0x1c 0x00 0x01 0x00 0x00
Batch Number              [rgbBatchNumber]: 0x0a 0x09 0xa4 0x13 0x00 0x04
X-coordinate              [wChipPositionX]: 0x0074
Y-coordinate              [wChipPositionY]: 0x0076
Firmware Identifier [dwFirmwareIdentifier]: 0x80101071
Build Number                 [rgbESWBuild]: 08 09

Slot 0xE0E0 contains Optiga Certificate
Slot 0xe0f0 contains Optiga private key

New ECC key created and stored in 0xE0F1, public stored in slot 0x0xF1D1

trustm_ecc_keygen -g 0xe0f1 -t 0x13 -k 0x03 -o Cloud.pem -s

But now executing
trustm_cert -w 0xe0e1 -i teste0e0.crt
results in

8806:Error [0x8008] : OPTIGA device Data Object Boundary Exceeded

Answered by ayushev

Nov 11, 2021

ok, I see now, the reason for this is that the command given to write the certificate to the object location contains a wrong offset value
From the log:
04 01 10 09 20 82 40 02 C5 E0 E1 BF 51 30 82 02 BD 30 82 , the value E0 E1 is the target object ID, afterwards the offset comes (see SetDataObject command in the Solution Reference Manual), in your case it is BF 51, which exceeds the boundary of the objects, thus you get an error.
The reason for this is here uninitialized value for the offset, for the read operation the offset value is zeroed. In order to fix it in your lcoal version jsut initialize this value with 0, and it will be fine.

I've posted a bug report for your issue.

View full answer

ayushev · 2021-11-05T08:01:22Z

ayushev
Nov 5, 2021
Maintainer

Hello @Kitty-Hawk1

here is a small description of this failure (0x08) - https://github.com/Infineon/optiga-trust-m/wiki/Device-Error-Codes
Could it be that the teste0e0.crt content too big is?

0 replies

Kitty-Hawk1 · 2021-11-05T08:50:21Z

Kitty-Hawk1
Nov 5, 2021
Author

Hi,

I was following the example on the web page

https://github.com/Infineon/linux-optiga-trust-m

trustm_cert -r 0xe0e0 -o teste0e0.crt
========================================================
OID              : 0xE0E0
Output File Name : teste0e0.crt
Success!!!
========================================================

trustm_cert -w 0xe0e1 -i teste0e0.crt
========================================================

9331:Error [0x8008] : OPTIGA device Data Object Boundary Exceeded

**Oddly** 

trustm_data -w 0xe0e1 -i 1234.txt

========================================================
Device Public Key           [0xE0E1] Offset: 0
Input data :
        31 32 33 34 0A
Write Success.
========================================================
root@mach-cw-rnet-sn-gpm-249-2050:/tmp# trustm_data -r 0xe0e1

========================================================
Device Public Key           [0xE0E1] [Size 0005] :
        31 32 33 34 0A
========================================================
root@mach-cw-rnet-sn-gpm-249-2050:/tmp# trustm_cert -w 0xe0e1 -i teste0e0.crt
========================================================

10421:Error [0x8008] : OPTIGA device Data Object Boundary Exceeded
========================================================
root@mach-cw-rnet-sn-gpm-249-2050:/tmp# trustm_data -r 0xe0e1

========================================================
Device Public Key           [0xE0E1] [Size 0005] :
        31 32 33 34 0A
========================================================

 trustm_data -w 0xe0e1 -i teste0e0.crt

========================================================
Device Public Key           [0xE0E1] Offset: 0
Input data :
        2D 2D 2D 2D 2D 42 45 47 49 4E 20 43 45 52 54 49
        46 49 43 41 54 45 2D 2D 2D 2D 2D 0A 4D 49 49 42
        31 7A 43 43 41 58 36 67 41 77 49 42 41 67 49 45
        53 46 73 6A 6A 44 41 4B 42 67 67 71 68 6B 6A 4F
        50 51 51 44 41 6A 42 79 4D 51 73 77 43 51 59 44
        56 51 51 47 45 77 4A 45 52 54 45 68 0A 4D 42 38
        47 41 31 55 45 43 67 77 59 53 57 35 6D 61 57 35
        6C 62 32 34 67 56 47 56 6A 61 47 35 76 62 47 39
        6E 61 57 56 7A 49 45 46 48 4D 52 4D 77 45 51 59
        44 56 51 51 4C 44 41 70 50 55 46 52 4A 0A 52 30
        45 6F 56 45 30 70 4D 53 73 77 4B 51 59 44 56 51
        51 44 44 43 4A 4A 62 6D 5A 70 62 6D 56 76 62 69
        42 50 55 46 52 4A 52 30 45 6F 56 45 30 70 49 46
        52 79 64 58 4E 30 49 45 30 67 51 30 45 67 0A 4D
        54 41 78 4D 42 34 58 44 54 45 35 4D 54 41 78 4E
        6A 45 7A 4E 54 6B 78 4E 31 6F 58 44 54 4D 35 4D
        54 41 78 4E 6A 45 7A 4E 54 6B 78 4E 31 6F 77 48
        44 45 61 4D 42 67 47 41 31 55 45 41 77 77 52 0A
        53 57 35 6D 61 57 35 6C 62 32 34 67 53 57 39 55
        49 45 35 76 5A 47 55 77 57 54 41 54 42 67 63 71
        68 6B 6A 4F 50 51 49 42 42 67 67 71 68 6B 6A 4F
        50 51 4D 42 42 77 4E 43 41 41 54 76 35 6E 50 4B
        0A 77 45 76 6E 52 4A 4E 54 64 38 6E 36 44 38 56
        4F 55 30 67 55 42 4C 48 69 71 78 59 72 75 36 6B
        57 6A 72 34 53 34 73 75 4A 75 4D 72 33 30 59 64
        53 33 75 6A 6C 73 52 68 74 53 64 67 47 78 2B 74
        35 0A 75 38 4A 6C 44 30 77 73 75 32 41 4D 54 31
        4D 75 6F 31 67 77 56 6A 41 4F 42 67 4E 56 48 51
        38 42 41 66 38 45 42 41 4D 43 41 49 41 77 44 41
        59 44 56 52 30 54 41 51 48 2F 42 41 49 77 41 44
        41 56 0A 42 67 4E 56 48 53 41 45 44 6A 41 4D 4D
        41 6F 47 43 43 71 43 46 41 42 45 41 52 51 42 4D
        42 38 47 41 31 55 64 49 77 51 59 4D 42 61 41 46
        44 77 77 6A 46 7A 56 69 75 69 6A 58 54 4B 41 35
        46 53 44 0A 73 76 2F 4E 68 6B 30 6A 4D 41 6F 47
        43 43 71 47 53 4D 34 39 42 41 4D 43 41 30 63 41
        4D 45 51 43 49 48 2F 37 73 4F 33 31 74 54 33 45
        70 75 45 73 71 77 4C 46 36 34 44 6C 39 35 6A 36
        55 45 36 77 0A 44 46 4C 54 7A 4F 2F 4C 38 75 34
        6C 41 69 41 54 33 5A 69 31 66 44 4B 78 4D 2F 51
        33 4E 45 4C 2B 35 6D 54 56 2F 75 64 6E 30 76 71
        33 41 66 71 65 46 2B 53 72 38 39 31 74 6D 51 3D
        3D 0A 2D 2D 2D 2D 2D 45 4E 44 20 43 45 52 54 49
        46 49 43 41 54 45 2D 2D 2D 2D 2D 0A
Write Success.
========================================================
root@mach-cw-rnet-sn-gpm-249-2050:/tmp# trustm_data -r 0xe0e1

========================================================
Device Public Key           [0xE0E1] [Size 0700] :
        2D 2D 2D 2D 2D 42 45 47 49 4E 20 43 45 52 54 49
        46 49 43 41 54 45 2D 2D 2D 2D 2D 0A 4D 49 49 42
        31 7A 43 43 41 58 36 67 41 77 49 42 41 67 49 45
        53 46 73 6A 6A 44 41 4B 42 67 67 71 68 6B 6A 4F
        50 51 51 44 41 6A 42 79 4D 51 73 77 43 51 59 44
        56 51 51 47 45 77 4A 45 52 54 45 68 0A 4D 42 38
        47 41 31 55 45 43 67 77 59 53 57 35 6D 61 57 35
        6C 62 32 34 67 56 47 56 6A 61 47 35 76 62 47 39
        6E 61 57 56 7A 49 45 46 48 4D 52 4D 77 45 51 59
        44 56 51 51 4C 44 41 70 50 55 46 52 4A 0A 52 30
        45 6F 56 45 30 70 4D 53 73 77 4B 51 59 44 56 51
        51 44 44 43 4A 4A 62 6D 5A 70 62 6D 56 76 62 69
        42 50 55 46 52 4A 52 30 45 6F 56 45 30 70 49 46
        52 79 64 58 4E 30 49 45 30 67 51 30 45 67 0A 4D
        54 41 78 4D 42 34 58 44 54 45 35 4D 54 41 78 4E
        6A 45 7A 4E 54 6B 78 4E 31 6F 58 44 54 4D 35 4D
        54 41 78 4E 6A 45 7A 4E 54 6B 78 4E 31 6F 77 48
        44 45 61 4D 42 67 47 41 31 55 45 41 77 77 52 0A
        53 57 35 6D 61 57 35 6C 62 32 34 67 53 57 39 55
        49 45 35 76 5A 47 55 77 57 54 41 54 42 67 63 71
        68 6B 6A 4F 50 51 49 42 42 67 67 71 68 6B 6A 4F
        50 51 4D 42 42 77 4E 43 41 41 54 76 35 6E 50 4B
        0A 77 45 76 6E 52 4A 4E 54 64 38 6E 36 44 38 56
        4F 55 30 67 55 42 4C 48 69 71 78 59 72 75 36 6B
        57 6A 72 34 53 34 73 75 4A 75 4D 72 33 30 59 64
        53 33 75 6A 6C 73 52 68 74 53 64 67 47 78 2B 74
        35 0A 75 38 4A 6C 44 30 77 73 75 32 41 4D 54 31
        4D 75 6F 31 67 77 56 6A 41 4F 42 67 4E 56 48 51
        38 42 41 66 38 45 42 41 4D 43 41 49 41 77 44 41
        59 44 56 52 30 54 41 51 48 2F 42 41 49 77 41 44
        41 56 0A 42 67 4E 56 48 53 41 45 44 6A 41 4D 4D
        41 6F 47 43 43 71 43 46 41 42 45 41 52 51 42 4D
        42 38 47 41 31 55 64 49 77 51 59 4D 42 61 41 46
        44 77 77 6A 46 7A 56 69 75 69 6A 58 54 4B 41 35
        46 53 44 0A 73 76 2F 4E 68 6B 30 6A 4D 41 6F 47
        43 43 71 47 53 4D 34 39 42 41 4D 43 41 30 63 41
        4D 45 51 43 49 48 2F 37 73 4F 33 31 74 54 33 45
        70 75 45 73 71 77 4C 46 36 34 44 6C 39 35 6A 36
        55 45 36 77 0A 44 46 4C 54 7A 4F 2F 4C 38 75 34
        6C 41 69 41 54 33 5A 69 31 66 44 4B 78 4D 2F 51
        33 4E 45 4C 2B 35 6D 54 56 2F 75 64 6E 30 76 71
        33 41 66 71 65 46 2B 53 72 38 39 31 74 6D 51 3D
        3D 0A 2D 2D 2D 2D 2D 45 4E 44 20 43 45 52 54 49
        46 49 43 41 54 45 2D 2D 2D 2D 2D 0A
========================================================

But

trustm_cert -r 0xe0e1 -o blah
========================================================
OID              : 0xE0E1
Output File Name : blah
Error :No X.509 cert found!!!!
========================================================

Master
SRCREV = "44f942c04424c03970242281667f01a5aa442d49"

0 replies

ayushev · 2021-11-05T18:08:55Z

ayushev
Nov 5, 2021
Maintainer

Interesting.
So you were able to write abstract data into the object (the last error you got, because the object content isn't a certificate, look in it, that is only ASCII encoded certificate, which isn't the same. As a content of the object, you should have a DER encoded certificate like the one below, where first 9 bytes are for internal use, and the DER encoded certificate starts from 30 82 01:

pi@yushevpi:~/git/linux-optiga-trust-m/bin $ ./trustm_data -r 0xe0e0 -o teste0e0.crt

========================================================
Device Public Key IFX       [0xE0E0]
[Size 0514] :
        C0 01 FF 00 01 FC 00 01 F9 30 82 01 F5 30 82 01
        7C A0 03 02 01 02 02 04 7E A2 FE CC 30 0A 06 08
        2A 86 48 CE 3D 04 03 03 30 72 31 0B 30 09 06 03
        55 04 06 13 02 44 45 31 21 30 1F 06 03 55 04 0A
        0C 18 49 6E 66 69 6E 65 6F 6E 20 54 65 63 68 6E
        6F 6C 6F 67 69 65 73 20 41 47 31 13 30 11 06 03
        55 04 0B 0C 0A 4F 50 54 49 47 41 28 54 4D 29 31
        2B 30 29 06 03 55 04 03 0C 22 49 6E 66 69 6E 65
        6F 6E 20 4F 50 54 49 47 41 28 54 4D 29 20 54 72
        75 73 74 20 4D 20 43 41 20 33 30 30 30 1E 17 0D
        32 30 30 39 31 30 31 31 34 30 33 32 5A 17 0D 34
        30 30 39 31 30 31 31 34 30 33 32 5A 30 1A 31 18
        30 16 06 03 55 04 03 0C 0F 49 6E 66 69 6E 65 6F
        6E 49 6F 54 4E 6F 64 65 30 59 30 13 06 07 2A 86
        48 CE 3D 02 01 06 08 2A 86 48 CE 3D 03 01 07 03
        42 00 04 1C 17 67 64 B7 B7 68 46 0C 86 F1 EC 19
        66 52 DD 1C 92 2C 95 B8 2E 9A E5 39 65 0B E5 F2
        1F 60 B3 B8 C0 D9 B9 6A 13 0D CB 70 95 38 18 0F
        D3 23 8F 31 80 90 5C 03 C8 29 B6 33 23 27 70 AC
        8E FB F0 A3 58 30 56 30 0E 06 03 55 1D 0F 01 01
        FF 04 04 03 02 00 80 30 0C 06 03 55 1D 13 01 01
        FF 04 02 30 00 30 15 06 03 55 1D 20 04 0E 30 0C
        30 0A 06 08 2A 82 14 00 44 01 14 01 30 1F 06 03
        55 1D 23 04 18 30 16 80 14 B3 83 E1 AC 56 94 06
        59 AF D8 AF 57 21 78 45 74 8E 0C 49 99 30 0A 06
        08 2A 86 48 CE 3D 04 03 03 03 67 00 30 64 02 30
        32 59 C4 36 61 86 C6 44 8D FE B8 A6 D3 A4 EA 08
        6E 63 51 40 43 B3 05 4D 11 1E 88 3E D0 3A 39 60
        BE 79 41 68 8B D8 4F 3E 29 D2 C7 B3 33 5C A9 FB
        02 30 42 D7 FB 3D 45 67 07 57 35 B1 09 E6 82 49
        D8 1F 77 A6 14 0D 1D 39 87 6E 59 01 B8 41 DC C8
        82 BD 5E BA 92 69 5F A1 E7 68 26 B1 B1 AC DB 0E
        AA 2B
Output to teste0e0.crt
========================================================

where as you attempt to read with the last command not a certificate but you ASCII encoded data.

To the main topic:
I'm not sure what exactly has happened, I mean why you can't write back the same certificate into the object, could you please try to download this certificate

pi@yushevpi:~/git/linux-optiga-trust-m/bin $ wget "https://raw.githubusercontent.com/Infineon/optiga-trust-m/develop/certificates/Infineon%20OPTIGA(TM)%20Trust%20M%20CA%20300.pem" -O ifx_ca_certificate.pem
pi@yushevpi:~/git/linux-optiga-trust-m/bin $ ./trustm_cert -w 0xe0e1 -i ifx_ca_certificate.pem

0 replies

Kitty-Hawk1 · 2021-11-08T10:40:30Z

Kitty-Hawk1
Nov 8, 2021
Author

cat ifx_ca_certificate.pem
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

 trustm_cert -w 0xe0e1 -i ifx_ca_certificate.pem
========================================================

3965:Error [0x8008] : OPTIGA device Data Object Boundary Exceeded
========================================================

openssl x509 -in ifx_ca_certificate.pem -out cert.der -outform  DER

 hexdump -C cert.der
00000000  30 82 02 bd 30 82 02 1f  a0 03 02 01 02 02 04 17  |0...0...........|
00000010  09 5f ce 30 0a 06 08 2a  86 48 ce 3d 04 03 04 30  |._.0...*.H.=...0|
00000020  79 31 0b 30 09 06 03 55  04 06 13 02 44 45 31 21  |y1.0...U....DE1!|
00000030  30 1f 06 03 55 04 0a 0c  18 49 6e 66 69 6e 65 6f  |0...U....Infineo|
00000040  6e 20 54 65 63 68 6e 6f  6c 6f 67 69 65 73 20 41  |n Technologies A|
00000050  47 31 1b 30 19 06 03 55  04 0b 0c 12 4f 50 54 49  |G1.0...U....OPTI|
00000060  47 41 28 54 4d 29 20 44  65 76 69 63 65 73 31 2a  |GA(TM) Devices1*|
00000070  30 28 06 03 55 04 03 0c  21 49 6e 66 69 6e 65 6f  |0(..U...!Infineo|
00000080  6e 20 4f 50 54 49 47 41  28 54 4d 29 20 45 43 43  |n OPTIGA(TM) ECC|
00000090  20 52 6f 6f 74 20 43 41  20 32 30 20 17 0d 32 30  | Root CA 20 ..20|
000000a0  30 38 30 37 30 39 31 38  31 32 5a 18 0f 32 30 35  |0807091812Z..205|
000000b0  30 30 38 30 37 30 39 31  38 31 32 5a 30 72 31 0b  |00807091812Z0r1.|
000000c0  30 09 06 03 55 04 06 13  02 44 45 31 21 30 1f 06  |0...U....DE1!0..|
000000d0  03 55 04 0a 0c 18 49 6e  66 69 6e 65 6f 6e 20 54  |.U....Infineon T|
000000e0  65 63 68 6e 6f 6c 6f 67  69 65 73 20 41 47 31 13  |echnologies AG1.|
000000f0  30 11 06 03 55 04 0b 0c  0a 4f 50 54 49 47 41 28  |0...U....OPTIGA(|
00000100  54 4d 29 31 2b 30 29 06  03 55 04 03 0c 22 49 6e  |TM)1+0)..U..."In|
00000110  66 69 6e 65 6f 6e 20 4f  50 54 49 47 41 28 54 4d  |fineon OPTIGA(TM|
00000120  29 20 54 72 75 73 74 20  4d 20 43 41 20 33 30 30  |) Trust M CA 300|
00000130  30 76 30 10 06 07 2a 86  48 ce 3d 02 01 06 05 2b  |0v0...*.H.=....+|
00000140  81 04 00 22 03 62 00 04  8c 2d 15 68 75 c1 0f 6d  |...".b...-.hu..m|
00000150  da 48 d0 7f 15 08 a6 2e  0c 82 ca 77 fc 42 85 55  |.H.........w.B.U|
00000160  a4 81 37 8c 59 b4 6e 07  29 e7 19 5a ad 5d 53 69  |..7.Y.n.)..Z.]Si|
00000170  6e 36 82 83 aa 36 77 65  04 2e c5 94 92 d4 45 e6  |n6...6we......E.|
00000180  89 72 86 8e 83 06 4f e2  32 69 6e 41 50 8b 0f 49  |.r....O.2inAP..I|
00000190  4e ca 3e bd c2 d4 d8 a4  00 a3 ca be 4b 3a 48 60  |N.>.........K:H`|
000001a0  0f 41 a5 7e 05 b9 8c 0e  a3 7d 30 7b 30 1d 06 03  |.A.~.....}0{0...|
000001b0  55 1d 0e 04 16 04 14 b3  83 e1 ac 56 94 06 59 af  |U..........V..Y.|
000001c0  d8 af 57 21 78 45 74 8e  0c 49 99 30 0e 06 03 55  |..W!xEt..I.0...U|
000001d0  1d 0f 01 01 ff 04 04 03  02 00 04 30 12 06 03 55  |...........0...U|
000001e0  1d 13 01 01 ff 04 08 30  06 01 01 ff 02 01 00 30  |.......0.......0|
000001f0  15 06 03 55 1d 20 04 0e  30 0c 30 0a 06 08 2a 82  |...U. ..0.0...*.|
00000200  14 00 44 01 14 01 30 1f  06 03 55 1d 23 04 18 30  |..D...0...U.#..0|
00000210  16 80 14 82 b8 3d cc 71  b8 3e 7e f6 9c d6 1d c8  |.....=.q.>~.....|
00000220  4d 52 32 70 6c c7 9d 30  0a 06 08 2a 86 48 ce 3d  |MR2pl..0...*.H.=|
00000230  04 03 04 03 81 8b 00 30  81 87 02 41 2a ec 2e 48  |.......0...A*..H|
00000240  9c d7 83 8b 8b 86 db f9  e8 9c 97 89 f7 4a 1e 64  |.............J.d|
00000250  c9 83 dd d3 c9 8b 07 50  22 42 19 6c aa 02 db 00  |.......P"B.l....|
00000260  45 ff 4f 6c 18 cb 3d bf  90 d5 72 9b a3 6a dc 8d  |E.Ol..=...r..j..|
00000270  cb 7c be 6e eb 76 8c e7  b0 c0 de 50 ed 02 42 00  |.|.n.v.....P..B.|
00000280  8f cc e5 18 fc c1 be 7f  f4 c9 6a 97 92 57 b8 ef  |..........j..W..|
00000290  0a fb 5d 08 e6 52 2e 66  55 46 68 1e 52 45 03 09  |..]..R.fUFh.RE..|
000002a0  61 f9 d1 55 e7 fc 02 07  58 a6 ed be 47 eb fa 9d  |a..U....X...G...|
000002b0  ab 67 0c 54 9f 06 c8 0d  96 af 6f 2d 76 54 ee f6  |.g.T......o-vT..|
000002c0  59                                                |Y|
000002c1

 trustm_cert -w 0xe0e1 -i cert.der
========================================================
invalid cert cert.der error!!!
========================================================

0 replies

ayushev · 2021-11-08T12:42:36Z

ayushev
Nov 8, 2021
Maintainer

Thank you, that indeed looks a bit not as it should be, the reason could be non-standard metadata settings changed in the past, could you please run the following command and put the result here:
./trustm_metadata -r 0xe0e1

0 replies

Kitty-Hawk1 · 2021-11-08T13:21:55Z

Kitty-Hawk1
Nov 8, 2021
Author

========================================================
Device Public Key           [0xE0E1] [Size 0027] :
        20 19 C0 01 01 C4 02 06 C0 C5 02 02 BC D0 03 E1
        FC 07 D1 01 00 D3 01 00 E8 01 12
        LcsO:0x01, Max:1728, Used:700, C:LcsO<0x07, R:ALW, E:ALW, DType:DEVCERT,

========================================================

1 reply

ayushev Nov 8, 2021
Maintainer

it looks as well as usual, nothingn starnge. I would have another favor to you, could you run two following commands:

openssl x509 -in ifx_ca_certificate.pem -inform PEM -out ifx_ca_certificate.crt -outform DER
./trustm_data -w 0xe0e1 -i  ifx_ca_certificate.crt

./trustm_cert -w 0xe0e3 -i ifx_ca_certificate.pem
This thing as a way to enable verbose output. For this you will need to recompile the sources
--> go to the repo root
--> open with any editor the file optiga_lib_config.h, for instance nano trustm_lib/optiga/include/optiga/optiga_lib_config.h
--> find there LOGGING entries and uncomment them (like below)

--> run sudo make uninstall
--> run make
--> run sudo make install
--> run ./trustm_cert -w 0xe0e1 -i ifx_ca_certificate.pem
--> paste here the output, directly, with <details> tag, or as an attachment to save up the space.

Kitty-Hawk1 · 2021-11-08T15:20:00Z

Kitty-Hawk1
Nov 8, 2021
Author

 trustm_data -w 0xe0e1 -i  ifx_ca_certificate.crt

========================================================
Device Public Key           [0xE0E1] Offset: 0
Input data :
        30 82 02 BD 30 82 02 1F A0 03 02 01 02 02 04 17
        09 5F CE 30 0A 06 08 2A 86 48 CE 3D 04 03 04 30
        79 31 0B 30 09 06 03 55 04 06 13 02 44 45 31 21
        30 1F 06 03 55 04 0A 0C 18 49 6E 66 69 6E 65 6F
        6E 20 54 65 63 68 6E 6F 6C 6F 67 69 65 73 20 41
        47 31 1B 30 19 06 03 55 04 0B 0C 12 4F 50 54 49
        47 41 28 54 4D 29 20 44 65 76 69 63 65 73 31 2A
        30 28 06 03 55 04 03 0C 21 49 6E 66 69 6E 65 6F
        6E 20 4F 50 54 49 47 41 28 54 4D 29 20 45 43 43
        20 52 6F 6F 74 20 43 41 20 32 30 20 17 0D 32 30
        30 38 30 37 30 39 31 38 31 32 5A 18 0F 32 30 35
        30 30 38 30 37 30 39 31 38 31 32 5A 30 72 31 0B
        30 09 06 03 55 04 06 13 02 44 45 31 21 30 1F 06
        03 55 04 0A 0C 18 49 6E 66 69 6E 65 6F 6E 20 54
        65 63 68 6E 6F 6C 6F 67 69 65 73 20 41 47 31 13
        30 11 06 03 55 04 0B 0C 0A 4F 50 54 49 47 41 28
        54 4D 29 31 2B 30 29 06 03 55 04 03 0C 22 49 6E
        66 69 6E 65 6F 6E 20 4F 50 54 49 47 41 28 54 4D
        29 20 54 72 75 73 74 20 4D 20 43 41 20 33 30 30
        30 76 30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B
        81 04 00 22 03 62 00 04 8C 2D 15 68 75 C1 0F 6D
        DA 48 D0 7F 15 08 A6 2E 0C 82 CA 77 FC 42 85 55
        A4 81 37 8C 59 B4 6E 07 29 E7 19 5A AD 5D 53 69
        6E 36 82 83 AA 36 77 65 04 2E C5 94 92 D4 45 E6
        89 72 86 8E 83 06 4F E2 32 69 6E 41 50 8B 0F 49
        4E CA 3E BD C2 D4 D8 A4 00 A3 CA BE 4B 3A 48 60
        0F 41 A5 7E 05 B9 8C 0E A3 7D 30 7B 30 1D 06 03
        55 1D 0E 04 16 04 14 B3 83 E1 AC 56 94 06 59 AF
        D8 AF 57 21 78 45 74 8E 0C 49 99 30 0E 06 03 55
        1D 0F 01 01 FF 04 04 03 02 00 04 30 12 06 03 55
        1D 13 01 01 FF 04 08 30 06 01 01 FF 02 01 00 30
        15 06 03 55 1D 20 04 0E 30 0C 30 0A 06 08 2A 82
        14 00 44 01 14 01 30 1F 06 03 55 1D 23 04 18 30
        16 80 14 82 B8 3D CC 71 B8 3E 7E F6 9C D6 1D C8
        4D 52 32 70 6C C7 9D 30 0A 06 08 2A 86 48 CE 3D
        04 03 04 03 81 8B 00 30 81 87 02 41 2A EC 2E 48
        9C D7 83 8B 8B 86 DB F9 E8 9C 97 89 F7 4A 1E 64
        C9 83 DD D3 C9 8B 07 50 22 42 19 6C AA 02 DB 00
        45 FF 4F 6C 18 CB 3D BF 90 D5 72 9B A3 6A DC 8D
        CB 7C BE 6E EB 76 8C E7 B0 C0 DE 50 ED 02 42 00
        8F CC E5 18 FC C1 BE 7F F4 C9 6A 97 92 57 B8 EF
        0A FB 5D 08 E6 52 2E 66 55 46 68 1E 52 45 03 09
        61 F9 D1 55 E7 FC 02 07 58 A6 ED BE 47 EB FA 9D
        AB 67 0C 54 9F 06 C8 0D 96 AF 6F 2D 76 54 EE F6
        59
Write Success.
========================================================

root@mach-cw-rnet-sn-gpm-249-2050:/nvmem# trustm_cert  -r 0xe0e1 -o  blah
========================================================
OID              : 0xE0E1
Output File Name : blah
Success!!!
more blah
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
root@mach-cw-rnet-sn-gpm-249-2050:/nvmem# more ifx_ca_certificate.pem
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE----

trustm_cert -w 0xe0e3 -i  ifx_ca_certificate.pem
========================================================

12371:Error [0x8008] : OPTIGA device Data Object Boundary Exceeded
========================================================

I'll rebuild and add debug


trustm_cert -w 0xe0e1 -i ifx_ca_certificate.pem
pal_loger_write : [optiga util]     : optiga_util_open_application
pal_loger_write :

pal_loger_write :

pal_loger_write : [optiga cmd]      : Sending open app command...
pal_loger_write :

pal_loger_write : [optiga comms]    : >>>>
pal_loger_write :

pal_loger_write :                     Length of data - 0x001B
pal_loger_write :

pal_loger_write :                     03 00 16 08 20 F0 00 00 10 D2 76 00 00 04 47 65 6E 41 75 74 68 41 70 70 6C BE 40

pal_loger_write : [optiga comms]    : <<<<
pal_loger_write :

pal_loger_write :                     Length of data - 0x000B
pal_loger_write :

pal_loger_write :                     00 00 06 08 20 00 00 00 00 19 04

pal_loger_write : [optiga cmd]      : Processing response for open app command...
pal_loger_write :

pal_loger_write : [optiga cmd]      : Response of open app command is processed...
pal_loger_write :

========================================================
pal_loger_write : [optiga util]     : optiga_util_write_data
pal_loger_write :
pal_loger_write : [optiga cmd]      : optiga_cmd_set_data_object
pal_loger_write :

pal_loger_write : [optiga cmd]      : Sending set data command...
pal_loger_write :

pal_loger_write : [optiga comms]    : >>>>
pal_loger_write :

pal_loger_write :                     Length of data - 0x0008
pal_loger_write :

pal_loger_write :                     04 00 03 08 00 01 E2 2A

pal_loger_write : [optiga comms]    : <<<<
pal_loger_write :

pal_loger_write :                     Length of data - 0x002C
pal_loger_write :

pal_loger_write :                     05 00 27 08 00 01 FF 90 F6 3C D8 61 FD 6F 85 B8 07 4C 32 C2 7B 54 E0 C7 2E A5 79 6D CE 10 BD E1

pal_loger_write :                     00 E6 BA C7 6F 00 00 00 C9 6A 03 45

pal_loger_write : [optiga comms]    : >>>>
pal_loger_write :

pal_loger_write :                     Length of data - 0x0037
pal_loger_write :

pal_loger_write :                     09 00 32 08 08 00 00 C9 6A 1E 01 30 6B 75 98 2A C7 D3 4E 8D DF 6E 80 F9 EC D1 FF AD E7 18 9D D2

pal_loger_write :                     75 A9 8C 1C 18 57 DD 3B 38 E1 70 CA BD E0 76 49 BE 72 77 95 F5 3D 7C

pal_loger_write : [optiga comms]    : <<<<
pal_loger_write :

pal_loger_write :                     Length of data - 0x0037
pal_loger_write :

pal_loger_write :                     0A 00 32 08 08 00 00 58 81 B7 EF 7B C6 75 E2 10 1A FA 6B C0 44 31 57 F9 20 9D 63 D5 29 59 AF F8

pal_loger_write :                     83 1F FC 85 01 31 C7 9E 21 EA 05 24 4A BC 9E E4 14 83 DF DC F2 74 07

pal_loger_write : [optiga comms]    : >>>>
pal_loger_write :

pal_loger_write :                     Length of data - 0x0115
pal_loger_write :

pal_loger_write :                     0E 01 10 09 23 00 00 58 82 01 BE 03 82 DB 22 E3 C4 72 1C 03 1B 87 7D F5 E0 F4 D4 F7 C2 28 62 A4

pal_loger_write :                     FD 37 53 E5 D4 80 66 08 2A 2D FF 41 30 A0 04 FD A9 52 41 0F 32 6F 0B 34 88 87 D8 28 CD AE BE A8

pal_loger_write :                     7B 1A A2 3F FE 84 D7 FC 5A BF C2 45 61 1E 60 EF F5 50 E9 26 B7 35 5F B0 80 BE AB C6 10 71 F1 5E

pal_loger_write :                     2D DE 95 0D 0C 3E B1 A2 F3 80 F2 AF 73 B0 70 1B BA B3 40 EB 1B 58 8B 03 E5 78 C0 3B 78 9E 38 06

pal_loger_write :                     C4 BC 26 E5 B8 CD 61 E4 49 D8 9B AF 52 2E 3F 60 C9 D5 91 4C 91 D3 60 82 34 39 3E E0 D3 4E 7A B6

pal_loger_write :                     48 D6 89 51 D2 52 C0 0E 04 A8 B8 57 23 21 06 1C 73 98 6B 57 07 3E E4 69 11 7D 25 28 B5 E2 39 E6

pal_loger_write :                     AB BB 2B A2 D9 CA 8F DF 9B 10 C3 02 1E A7 F9 24 38 9B C3 10 C9 1B E3 95 8A 90 13 29 A3 8E 5D EA

pal_loger_write :                     29 10 E9 9A 81 77 A3 4B E9 FA 31 58 54 50 90 06 92 B6 28 3A 1B A5 5C 16 89 3F 45 AB B3 E9 F7 7B

pal_loger_write :                     4E 10 07 73 D3 E7 D0 FD 0E 11 81 62 9F B4 C0 C6 83 4E 74 88 00

pal_loger_write : [optiga comms]    : >>>>
pal_loger_write :

pal_loger_write :                     Length of data - 0x0115
pal_loger_write :

pal_loger_write :                     02 01 10 0A 0D 1F 41 2F 92 99 77 98 0F B0 3E 70 67 1D 7C 56 26 6F B0 44 E7 36 1C 9F 7C A1 BC 78

pal_loger_write :                     52 4A 07 0B 4A 14 0A 8D E5 62 0D 90 54 09 24 0A 53 00 A0 F4 77 0E EB 91 27 03 3A ED E7 20 1A C5

pal_loger_write :                     51 56 38 20 CC DD C7 26 8B 3E 15 A1 F5 C0 AB 16 0F A9 8F C5 3D BB F9 3B 87 87 AA 76 62 8D 44 3B

pal_loger_write :                     23 C0 42 56 9B B8 F5 49 F2 D9 E2 8C 74 70 6A 8C 14 21 0A A6 D0 18 6F 71 45 21 45 BC F3 28 27 2F

pal_loger_write :                     04 9F 03 EE 96 90 9A 91 F8 3A 89 F5 B1 C6 B0 A6 19 A6 B6 51 9E AC 2E AA A8 77 49 90 5B DA 2C 77

pal_loger_write :                     53 F1 EC F7 C8 37 E0 82 34 83 3A 63 A5 58 06 D0 7D B4 E5 05 2B E2 38 F2 61 26 9B 9E ED AF 98 D6

pal_loger_write :                     B4 80 E5 CF 2C 3F E3 62 2F B4 6A 6A 92 9A 03 B8 1F 2B D9 BB 73 BD 28 CB 3A 37 29 CF 9A E9 CB 0C

pal_loger_write :                     A6 73 FC 5E EB B1 91 45 7A 51 3B B3 D8 80 2B 5D 77 64 92 3F 68 5B 40 5B E2 DA FE 35 1A 44 CD D2

pal_loger_write :                     19 18 8F 39 50 26 13 E2 A9 4C 07 A1 57 84 9D 38 E5 47 F2 05 5F

pal_loger_write : [optiga comms]    : >>>>
pal_loger_write :

pal_loger_write :                     Length of data - 0x00BE
pal_loger_write :

pal_loger_write :                     06 00 B9 0C 7D B9 27 C0 3C 08 2D 58 53 6A 4A 7F E5 E0 03 62 56 86 5F 41 9E 83 C7 EC 54 91 BE 72

pal_loger_write :                     88 A2 33 46 07 6E 65 C6 6B EA 89 51 23 0D 05 31 CD 88 3C BD 63 29 6F 3A 34 EC 8C EB 2C C5 32 67

pal_loger_write :                     29 57 DA 50 4B 6C 3A 73 2D C7 8B 8D 66 3D AF BF 30 B5 7B FB D2 7E DF A9 E0 8B 1D 05 B1 82 5F C8

pal_loger_write :                     33 D7 3F 45 B3 3E 6C 1F 9F 25 E9 91 49 DA 2F 27 DF 06 D3 8C F5 12 1D A6 03 DC 3C 84 B8 95 57 E7

pal_loger_write :                     C8 79 2D 09 B9 ED 7A 27 5A 4C B6 6E C9 8B 13 98 D3 FD 19 D3 EB 0D C2 60 BE C6 EF B4 D1 78 BB AB

pal_loger_write :                     12 1C 4F F7 2F EC 14 B7 F7 55 E0 1F 06 6C 6C 53 9E F1 07 69 2F 6C 9E 9F AF BB 66 78 EF 4A

pal_loger_write : [optiga comms]    : <<<<
pal_loger_write :

pal_loger_write :                     Length of data - 0x0017
pal_loger_write :

pal_loger_write :                     0D 00 12 08 23 00 00 C9 6B A3 3D 8B 71 3E 4B 22 5D 3A 13 2F 23 EF B9

pal_loger_write : [optiga cmd]      : Processing response for set data command...
pal_loger_write :

pal_loger_write : [optiga cmd]      : Error in processing set data response...
pal_loger_write :

pal_loger_write : [optiga comms]    : >>>>
pal_loger_write :

pal_loger_write :                     Length of data - 0x001D
pal_loger_write :

pal_loger_write :                     0B 00 18 08 23 00 00 58 83 6B E0 33 E6 85 82 53 11 C9 9F 80 44 46 FB 6B 69 3A 94 C5 E4

pal_loger_write : [optiga comms]    : <<<<
pal_loger_write :

pal_loger_write :                     Length of data - 0x0018
pal_loger_write :

pal_loger_write :                     02 00 13 08 23 00 00 C9 6C 9A F8 64 57 BA EE 80 66 30 61 01 8C 51 82 F1


1626:Error [0x8008] : OPTIGA device Data Object Boundary Exceeded
========================================================
pal_loger_write : [optiga util]     : optiga_util_close_application
pal_loger_write :

pal_loger_write : [optiga cmd]      : optiga_cmd_close_application
pal_loger_write :

pal_loger_write : [optiga cmd]      : Sending close app command..
pal_loger_write :

pal_loger_write : [optiga comms]    : >>>>
pal_loger_write :

pal_loger_write :                     Length of data - 0x000B
pal_loger_write :

pal_loger_write :                     0C 00 06 08 20 F1 00 00 00 32 BB

pal_loger_write : [optiga comms]    : <<<<
pal_loger_write :

pal_loger_write :                     Length of data - 0x000B
pal_loger_write :

pal_loger_write :                     07 00 06 08 20 00 00 00 00 F0 E6

pal_loger_write : [optiga cmd]      : Processing response for close app command...
pal_loger_write :

pal_loger_write : [optiga cmd]      : Response of close app command is processed...
pal_loger_write :

0 replies

Kitty-Hawk1 · 2021-11-10T14:02:41Z

Kitty-Hawk1
Nov 10, 2021
Author

Any thoughts on above ?

1 reply

ayushev Nov 10, 2021
Maintainer

Sorry, I didn't get the notification that you have added yesterday the log, only the main message. One last favor, could you please disable the shielded communication (this can be done in the same config if you did cnahge this), otherwise please specify the option -X; e.g. trustm_cert -w 0xe0e1 -i ifx_ca_certificate.pem -X

Kitty-Hawk1 · 2021-11-10T15:52:29Z

Kitty-Hawk1
Nov 10, 2021
Author

trustm_cert -w 0xe0e1 -i ifx_ca_certificate.pem -X
Bypass Shielded Communication.
pal_loger_write : [optiga util]     : optiga_util_open_application
pal_loger_write :

pal_loger_write : [optiga cmd]      : optiga_cmd_open_application
pal_loger_write :

pal_loger_write : [optiga cmd]      : Sending open app command...
pal_loger_write :

pal_loger_write : [optiga comms]    : >>>>
pal_loger_write :

pal_loger_write :                     Length of data - 0x001B
pal_loger_write :

pal_loger_write :                     03 00 16 08 20 F0 00 00 10 D2 76 00 00 04 47 65 6E 41 75 74 68 41 70 70 6C BE 40

pal_loger_write : [optiga comms]    : <<<<
pal_loger_write :

pal_loger_write :                     Length of data - 0x000B
pal_loger_write :

pal_loger_write :                     00 00 06 08 20 00 00 00 00 19 04

pal_loger_write : [optiga cmd]      : Processing response for open app command...
pal_loger_write :

pal_loger_write : [optiga cmd]      : Response of open app command is processed...
pal_loger_write :

========================================================
pal_loger_write : [optiga util]     : optiga_util_write_data
pal_loger_write :

pal_loger_write : [optiga cmd]      : optiga_cmd_set_data_object
pal_loger_write :

pal_loger_write : [optiga cmd]      : Sending set data command...
pal_loger_write :

pal_loger_write : [optiga comms]    : >>>>
pal_loger_write :

pal_loger_write :                     Length of data - 0x0115
pal_loger_write :

pal_loger_write :                     04 01 10 09 20 82 40 02 C5 E0 E1 BF 51 30 82 02 BD 30 82 02 1F A0 03 02 01 02 02 04 17 09 5F CE

pal_loger_write :                     30 0A 06 08 2A 86 48 CE 3D 04 03 04 30 79 31 0B 30 09 06 03 55 04 06 13 02 44 45 31 21 30 1F 06

pal_loger_write :                     03 55 04 0A 0C 18 49 6E 66 69 6E 65 6F 6E 20 54 65 63 68 6E 6F 6C 6F 67 69 65 73 20 41 47 31 1B

pal_loger_write :                     30 19 06 03 55 04 0B 0C 12 4F 50 54 49 47 41 28 54 4D 29 20 44 65 76 69 63 65 73 31 2A 30 28 06

pal_loger_write :                     03 55 04 03 0C 21 49 6E 66 69 6E 65 6F 6E 20 4F 50 54 49 47 41 28 54 4D 29 20 45 43 43 20 52 6F

pal_loger_write :                     6F 74 20 43 41 20 32 30 20 17 0D 32 30 30 38 30 37 30 39 31 38 31 32 5A 18 0F 32 30 35 30 30 38

pal_loger_write :                     30 37 30 39 31 38 31 32 5A 30 72 31 0B 30 09 06 03 55 04 06 13 02 44 45 31 21 30 1F 06 03 55 04

pal_loger_write :                     0A 0C 18 49 6E 66 69 6E 65 6F 6E 20 54 65 63 68 6E 6F 6C 6F 67 69 65 73 20 41 47 31 13 30 11 06

pal_loger_write :                     03 55 04 0B 0C 0A 4F 50 54 49 47 41 28 54 4D 29 31 2B 30 1C FC

pal_loger_write : [optiga comms]    : >>>>
pal_loger_write :

pal_loger_write :                     Length of data - 0x0115
pal_loger_write :

pal_loger_write :                     08 01 10 0A 29 06 03 55 04 03 0C 22 49 6E 66 69 6E 65 6F 6E 20 4F 50 54 49 47 41 28 54 4D 29 20

pal_loger_write :                     54 72 75 73 74 20 4D 20 43 41 20 33 30 30 30 76 30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B 81 04

pal_loger_write :                     00 22 03 62 00 04 8C 2D 15 68 75 C1 0F 6D DA 48 D0 7F 15 08 A6 2E 0C 82 CA 77 FC 42 85 55 A4 81

pal_loger_write :                     37 8C 59 B4 6E 07 29 E7 19 5A AD 5D 53 69 6E 36 82 83 AA 36 77 65 04 2E C5 94 92 D4 45 E6 89 72

pal_loger_write :                     86 8E 83 06 4F E2 32 69 6E 41 50 8B 0F 49 4E CA 3E BD C2 D4 D8 A4 00 A3 CA BE 4B 3A 48 60 0F 41

pal_loger_write :                     A5 7E 05 B9 8C 0E A3 7D 30 7B 30 1D 06 03 55 1D 0E 04 16 04 14 B3 83 E1 AC 56 94 06 59 AF D8 AF

pal_loger_write :                     57 21 78 45 74 8E 0C 49 99 30 0E 06 03 55 1D 0F 01 01 FF 04 04 03 02 00 04 30 12 06 03 55 1D 13

pal_loger_write :                     01 01 FF 04 08 30 06 01 01 FF 02 01 00 30 15 06 03 55 1D 20 04 0E 30 0C 30 0A 06 08 2A 82 14 00

pal_loger_write :                     44 01 14 01 30 1F 06 03 55 1D 23 04 18 30 16 80 14 82 B8 D5 82

pal_loger_write : [optiga comms]    : >>>>
pal_loger_write :

pal_loger_write :                     Length of data - 0x00B2
pal_loger_write :

pal_loger_write :                     0C 00 AD 0C 3D CC 71 B8 3E 7E F6 9C D6 1D C8 4D 52 32 70 6C C7 9D 30 0A 06 08 2A 86 48 CE 3D 04

pal_loger_write :                     03 04 03 81 8B 00 30 81 87 02 41 2A EC 2E 48 9C D7 83 8B 8B 86 DB F9 E8 9C 97 89 F7 4A 1E 64 C9

pal_loger_write :                     83 DD D3 C9 8B 07 50 22 42 19 6C AA 02 DB 00 45 FF 4F 6C 18 CB 3D BF 90 D5 72 9B A3 6A DC 8D CB

pal_loger_write :                     7C BE 6E EB 76 8C E7 B0 C0 DE 50 ED 02 42 00 8F CC E5 18 FC C1 BE 7F F4 C9 6A 97 92 57 B8 EF 0A

pal_loger_write :                     FB 5D 08 E6 52 2E 66 55 46 68 1E 52 45 03 09 61 F9 D1 55 E7 FC 02 07 58 A6 ED BE 47 EB FA 9D AB

pal_loger_write :                     67 0C 54 9F 06 C8 0D 96 AF 6F 2D 76 54 EE F6 59 0B 60

pal_loger_write : [optiga comms]    : <<<<
pal_loger_write :

pal_loger_write :                     Length of data - 0x000B
pal_loger_write :

pal_loger_write :                     07 00 06 08 20 FF 00 00 00 35 34

pal_loger_write : [optiga cmd]      : Processing response for set data command...
pal_loger_write :

pal_loger_write : [optiga cmd]      : Error in processing set data response...
pal_loger_write :

pal_loger_write : [optiga comms]    : >>>>
pal_loger_write :

pal_loger_write :                     Length of data - 0x0011
pal_loger_write :

pal_loger_write :                     01 00 0C 08 20 01 00 00 06 F1 C2 00 00 00 01 67 84

pal_loger_write : [optiga comms]    : <<<<
pal_loger_write :

pal_loger_write :                     Length of data - 0x000C
pal_loger_write :

pal_loger_write :                     08 00 07 08 20 00 00 00 01 08 3B 3B


1564:Error [0x8008] : OPTIGA device Data Object Boundary Exceeded
========================================================
pal_loger_write : [optiga util]     : optiga_util_close_application
pal_loger_write :

pal_loger_write : [optiga cmd]      : optiga_cmd_close_application
pal_loger_write :

pal_loger_write : [optiga cmd]      : Sending close app command..
pal_loger_write :

pal_loger_write : [optiga comms]    : >>>>
pal_loger_write :

pal_loger_write :                     Length of data - 0x000B
pal_loger_write :

pal_loger_write :                     06 00 06 08 20 F1 00 00 00 D6 8B

pal_loger_write : [optiga comms]    : <<<<
pal_loger_write :

pal_loger_write :                     Length of data - 0x000B
pal_loger_write :

pal_loger_write :                     0D 00 06 08 20 00 00 00 00 14 D6

pal_loger_write : [optiga cmd]      : Processing response for close app command...
pal_loger_write :

pal_loger_write : [optiga cmd]      : Response of close app command is processed...
pal_loger_write :

0 replies

ayushev · 2021-11-11T10:09:11Z

ayushev
Nov 11, 2021
Maintainer

ok, I see now, the reason for this is that the command given to write the certificate to the object location contains a wrong offset value
From the log:
04 01 10 09 20 82 40 02 C5 E0 E1 BF 51 30 82 02 BD 30 82 , the value E0 E1 is the target object ID, afterwards the offset comes (see SetDataObject command in the Solution Reference Manual), in your case it is BF 51, which exceeds the boundary of the objects, thus you get an error.
The reason for this is here uninitialized value for the offset, for the read operation the offset value is zeroed. In order to fix it in your lcoal version jsut initialize this value with 0, and it will be fine.

I've posted a bug report for your issue.

1 reply

Kitty-Hawk1 Nov 16, 2021
Author

Yes this fixed the problem

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

OPTIGA device Data Object Boundary Exceeded - after storing ECC Private&Public key #22

{{title}}

Replies: 10 comments 3 replies

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

OPTIGA device Data Object Boundary Exceeded - after storing ECC Private&Public key #22

Kitty-Hawk1 Nov 3, 2021

Replies: 10 comments · 3 replies

ayushev Nov 5, 2021 Maintainer

Kitty-Hawk1 Nov 5, 2021 Author

ayushev Nov 5, 2021 Maintainer

Kitty-Hawk1 Nov 8, 2021 Author

ayushev Nov 8, 2021 Maintainer

Kitty-Hawk1 Nov 8, 2021 Author

ayushev Nov 8, 2021 Maintainer

Kitty-Hawk1 Nov 8, 2021 Author

Kitty-Hawk1 Nov 10, 2021 Author

ayushev Nov 10, 2021 Maintainer

Kitty-Hawk1 Nov 10, 2021 Author

ayushev Nov 11, 2021 Maintainer

Kitty-Hawk1 Nov 16, 2021 Author

Kitty-Hawk1
Nov 3, 2021

Replies: 10 comments 3 replies

ayushev
Nov 5, 2021
Maintainer

Kitty-Hawk1
Nov 5, 2021
Author

ayushev
Nov 5, 2021
Maintainer

Kitty-Hawk1
Nov 8, 2021
Author

ayushev
Nov 8, 2021
Maintainer

Kitty-Hawk1
Nov 8, 2021
Author

ayushev Nov 8, 2021
Maintainer

Kitty-Hawk1
Nov 8, 2021
Author

Kitty-Hawk1
Nov 10, 2021
Author

ayushev Nov 10, 2021
Maintainer

Kitty-Hawk1
Nov 10, 2021
Author

ayushev
Nov 11, 2021
Maintainer

Kitty-Hawk1 Nov 16, 2021
Author