Hi,
When I try to export a certificate from my meter, director send a message without signature. Same to remove. It is correct?
The ciphered context can be decrypted successfully by translator. Please help to check it. Thanks!
director version: 20241216.1
guek: 1111111111111111
gak: 2222222222222222
client title: CTT00000
server title: Vango321
security suite: suite 1
security policy: authentication&encryption
Logs:
7E A0 A3 02 21 81 54 61 61 E6 E6 00 DF 00 08 43 54 54 30 30 30 30 30 08 56 61 6E 67 6F 33 32 31 00 00 7F CB 7D 31 00 00 00 02 07 4D F1 CA 8F 81 D8 09 21 E8 C5 FF 04 D2 DF BD 18 18 3D 43 71 13 26 3B 95 26 37 61 D8 71 CD 9C 8C 49 EA 05 B3 22 6A 5B 4B 45 0C B4 23 F5 7E 04 6F F1 E3 F9 E5 FA F4 E5 F4 DA 7A 44 8B FB B9 7E 93 C8 84 44 94 2B 20 C1 F3 E1 DF 60 E1 32 07 C9 E5 C8 30 AC 6A 8B 3D 05 89 27 2A 8D 82 C5 43 25 50 60 AD F1 2A D4 EB 90 C6 D9 DC 99 B4 F6 92 EA 50 01 A6 F2 FA 3F 3A AC D7 A6 7E
Hi, GXDLMSDirector reads…
Hi,
GXDLMSDirector reads access right from the meter. If the meter is not using the signature for the export or remove that is not added.
BR,
Mikko
Sorry, there is a problem…
Sorry, there is a problem with my description. The policy also include signature. And I select general-signing.
Hi, Select the security…
Hi,
Select the security setup1 object in GXDLMSDirector. Then select "Method access rights tab". Is the "AuthenticationRequest" included to access rights or is there only "Access".
If there is only "Access" you can import and export the certificates without signature.
BR,
Mikko
Hi, thank you for your reply…
Hi,
thank you for your reply.
I tried to change the access rights of method, but it didn’t work. Abnormal phenomenon remains the same as before. Method access right is “access, digitally-signed-request, digitally-signed-response” now.
And the APDU lacks a signature, which in my understanding is only related to attribute 2 of class64.
Hi, The meter gives the…
Hi,
The meter gives the access rights and you can't change them.
A signature is sent only if the meter requires it and it's set in access rights.
Check also that you have set SigningKeyPair and Signing is GeneralSigning on "Secured connections" tab.
BR,
Mikko
Hi, I can change the access…
Hi,
Because I can change the access rights by modifying the meter code, the method rights of “access, digitally-signed-request, digitally-signed-response” was read from meter using director.
And I can use “general-signing” for communication, such as writing and reading. This issue is discovered during the use of it.