ehn-dcc-development / hcert-kotlin

Kotlin multiplatform implementation of the HCERT/DCC specification
Apache License 2.0
25 stars 25 forks source link

Public TrustList ? #28

Closed jnischler closed 3 years ago

jnischler commented 3 years ago

Hey everyone,

is there a public available trust list ?

Same as: https://github.com/eu-digital-green-certificates/dgc-participating-countries/issues/10

We would only find an outdated list provided by the TU Graz ?

What lists are you using for your implementation ?

regards Julian

jnischler commented 3 years ago

maybe this is the wrong repo to create this issue but I am quite confused ;)

and another question what is the difference between this 2 projects: https://github.com/eu-digital-green-certificates https://github.com/ehn-dcc-development

regards Julian

nodh commented 3 years ago

I can only point you to our demonstration implementation of the service at https://dgc.a-sit.at/ehn/. There you can get a trust list content and signature file.

jnischler commented 3 years ago

Hi,

thanks for the input. We already found this API but the data seams to be outdated, or just for test purpose. For example the German production public keys are missing. Also the Trust Anchor (Trust List Signing Certificate) is already expired.

Using this trust list we are able to validate Austrian QR-codes but cant validate German codes.

Have a look at: https://github.com/eu-digital-green-certificates/dgc-participating-countries/issues/10 The EU won't open there gateway, it needs to be done on a national level.

This doesn't make a lot of sense as everyone is able to open an read the codes but can't validate the codes … I don't get it ;)

Is Austria going to publish a full trust list with only trusted keys and without test keys ?

thanks and best regards

asitplus-pteufl commented 3 years ago

can you contact me directly peter.teufl (at) a-sit.at?

jnischler commented 3 years ago

thank will send you an email asap regards

nodh commented 3 years ago

I thik we can close this issue here.