eu-digital-green-certificates / dgc-overview

This repository provides an overview over the EU Digital Green Certificates (DGC) project.
Apache License 2.0
209 stars 29 forks source link

How to access the primary (global) trust list #34

Closed jnischler closed 3 years ago

jnischler commented 3 years ago

Hey everyone,

first of all thanks for this awesome work in such a short time.

To verify all the different codes we need access to a global trust list. Of course only to access the public keys.

We found one list for Austria, but this list looks more like a test list. But using this list we are able to verify code for Austria but cant verify other countries.

Maybe I did get something wrong or why is the trust list not public accessible. The public keys are no sensitive information.

https://dgc.a-sit.at/ehn/cert/listv2 https://dgc.a-sit.at/ehn/cert/sigv2 https://dgc.a-sit.at/ehn/

relevant issues: https://github.com/ehn-dcc-development/hcert-kotlin/issues/28 https://github.com/eu-digital-green-certificates/dgc-participating-countries/issues/10

thanks and best regards Julian

jnischler commented 3 years ago

Looking at this document: https://github.com/eu-digital-green-certificates/dgc-overview/blob/main/guides/certificate-governance.md

It seams like the trust list provided by the EU is only exchanged with the national backends, so no public access there ? Is this intentional ?

So we would need to get access and connect to the national backend of a country? Our development is located in Austria but we are operating services all over Europe.

thanks

daniel-eder commented 3 years ago

Closing this, see https://github.com/eu-digital-green-certificates/dgc-participating-countries/issues/10