search

iSPIRT / NPNT-Provisional-testing-tool

A simple and easy tool to perform a basic check of NPNT/ Digital Sky compliance. The App is a checklist to verify basic NPNT work and is limited to NPNT verification, PA, PIN check and Flight log signature Verification.
12 stars 20 forks source link

verification of fake permission Artifact #3

Closed yogananda72 closed 5 years ago

yogananda72 commented 5 years ago

Hi, As i am checking the NPNT testing tool, i need help how to check the fake permission artifact test case. Observed points: 1.The certificate what it is creating from permission artifact file is same for all test cases. If its is like that how we can check for fake file?

mnihalm commented 5 years ago

The permission artefact with fake signature is also being generated in the test case. and that uses a different certificate.

yogananda72 commented 5 years ago

Hi, i am checking once again. i will update the feedback soon

On Mon, May 13, 2019 at 12:37 PM Nihal M notifications@github.com wrote:

The permission artefact with fake signature is also being generated in the test case. and that uses a different certificate.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/iSPIRT/NPNT-Provisional-testing-tool/issues/3#issuecomment-491701613, or mute the thread https://github.com/notifications/unsubscribe-auth/ACOGM4HTG4RSDZ4RRPOS5DDPVEHTRANCNFSM4HMIMCKQ .

-- Regards

T.YOGANANDA 9036043124

yogananda72 commented 5 years ago

Hi, As we are validating the permission artifact certificate with DGCA private key(got from npnt testing tool folder) all test case permission artifact certifactes are validating. For reference you can find the screen shots and attached signed permission artifacts of all cases in below google link.

https://drive.google.com/open?id=1rfQDV3z9Y3EjBwn562YwbnD12Og7sxgj

mnihalm commented 5 years ago

@yogananda72 ,

I just had a look at this . The certificate used in XML signature is the same, the public key used is different. So, if you check the signature of the XML, you'll find that it is not the same