export/remove certificate issue

By hxiii, 31 December, 2024
Forums
DLMSDirector

Hi,
When I try to export a certificate from my meter, director send a message without signature. Same to remove. It is correct?
The ciphered context can be decrypted successfully by translator. Please help to check it. Thanks!

director version: 20241216.1
guek: 1111111111111111
gak: 2222222222222222
client title: CTT00000
server title: Vango321
security suite: suite 1
security policy: authentication&encryption

Logs:
7E A0 A3 02 21 81 54 61 61 E6 E6 00 DF 00 08 43 54 54 30 30 30 30 30 08 56 61 6E 67 6F 33 32 31 00 00 7F CB 7D 31 00 00 00 02 07 4D F1 CA 8F 81 D8 09 21 E8 C5 FF 04 D2 DF BD 18 18 3D 43 71 13 26 3B 95 26 37 61 D8 71 CD 9C 8C 49 EA 05 B3 22 6A 5B 4B 45 0C B4 23 F5 7E 04 6F F1 E3 F9 E5 FA F4 E5 F4 DA 7A 44 8B FB B9 7E 93 C8 84 44 94 2B 20 C1 F3 E1 DF 60 E1 32 07 C9 E5 C8 30 AC 6A 8B 3D 05 89 27 2A 8D 82 C5 43 25 50 60 AD F1 2A D4 EB 90 C6 D9 DC 99 B4 F6 92 EA 50 01 A6 F2 FA 3F 3A AC D7 A6 7E

Kurumi

1 year 1 month ago

Hi,

GXDLMSDirector reads access right from the meter. If the meter is not using the signature for the export or remove that is not added.

BR,
Mikko

hxiii

1 year 1 month ago

Sorry, there is a problem with my description. The policy also include signature. And I select general-signing.

Kurumi

1 year 1 month ago

Hi,

Select the security setup1 object in GXDLMSDirector. Then select "Method access rights tab". Is the "AuthenticationRequest" included to access rights or is there only "Access".

If there is only "Access" you can import and export the certificates without signature.

BR,
Mikko

hxiii

1 year 1 month ago

Hi,
thank you for your reply.

I tried to change the access rights of method, but it didn’t work. Abnormal phenomenon remains the same as before. Method access right is “access, digitally-signed-request, digitally-signed-response” now.

And the APDU lacks a signature, which in my understanding is only related to attribute 2 of class64.

Kurumi

1 year 1 month ago

Hi,

The meter gives the access rights and you can't change them.

A signature is sent only if the meter requires it and it's set in access rights.

Check also that you have set SigningKeyPair and Signing is GeneralSigning on "Secured connections" tab.

BR,
Mikko

hxiii

1 year 1 month ago

Hi,
Because I can change the access rights by modifying the meter code, the method rights of “access, digitally-signed-request, digitally-signed-response” was read from meter using director.

And I can use “general-signing” for communication, such as writing and reading. This issue is discovered during the use of it.