aoki.management.commands.aoki_setup_est_onboarding_test_env

Sets up a Trustpoint test environment for DevOwnerID EST onboarding enrollment testing.

This command creates an environment where the device first needs onboarding (obtaining a Domain Credential) before a DevOwnerID can be issued. It creates:

• A local issuing CA called DevOwnerIDOnboardingCA (root + intermediate, RSA-2048).

• A domain DevOwnerIDOnboardingDomain associated with that CA.

• A device DevOwnerIDOnboardingDevice in that domain, configured for EST username/password onboarding with password devownerid-onboarding123.

• A TLS truststore DevOwnerIDOnboardingTLSTruststore containing the Trustpoint HTTPS server cert.

• An OwnerCredentialModel (DevOwnerIDOnboardingOwnerCred) of type REMOTE_EST_ONBOARDING, configured for remote EST enrollment via localhost:443 with two paths:

  • Domain Credential path: /.well-known/est/DevOwnerIDOnboardingDomain/devownerid_domain_credential/simpleenroll

  • DevOwnerID path: /.well-known/est/DevOwnerIDOnboardingDomain/dev_owner_id/simpleenroll

  Key type RSA-2048, linked to the TLS truststore above via the OnboardingConfigModel.

Module Contents

aoki.management.commands.aoki_setup_est_onboarding_test_env.CA_UNIQUE_NAME = 'DevOwnerIDOnboardingCA'

aoki.management.commands.aoki_setup_est_onboarding_test_env.DOMAIN_UNIQUE_NAME = 'DevOwnerIDOnboardingDomain'

aoki.management.commands.aoki_setup_est_onboarding_test_env.DEVICE_COMMON_NAME = 'DevOwnerIDOnboardingDevice'

aoki.management.commands.aoki_setup_est_onboarding_test_env.DEVICE_SERIAL_NUMBER = 'DEVOWNERID-ONBOARDING-001'

aoki.management.commands.aoki_setup_est_onboarding_test_env.EST_PASSWORD = 'devownerid-onboarding123'

aoki.management.commands.aoki_setup_est_onboarding_test_env.OWNER_CRED_UNIQUE_NAME = 'DevOwnerIDOnboardingOwnerCred'

aoki.management.commands.aoki_setup_est_onboarding_test_env.TRUSTSTORE_UNIQUE_NAME = 'DevOwnerIDOnboardingTLSTruststore'

aoki.management.commands.aoki_setup_est_onboarding_test_env.HTTPS_SERVER_CERT_PATH

aoki.management.commands.aoki_setup_est_onboarding_test_env.REMOTE_HOST = 'localhost'

aoki.management.commands.aoki_setup_est_onboarding_test_env.REMOTE_PORT = 443

aoki.management.commands.aoki_setup_est_onboarding_test_env.REMOTE_PATH_DEV_OWNER_ID = '/.well-known/est/DevOwnerIDOnboardingDomain/dev_owner_id/simpleenroll'

aoki.management.commands.aoki_setup_est_onboarding_test_env.REMOTE_PATH_DOMAIN_CREDENTIAL = '/.well-known/est/DevOwnerIDOnboardingDomain/domain_credential/simpleenroll'

aoki.management.commands.aoki_setup_est_onboarding_test_env.KEY_TYPE = 'RSA-2048'

class aoki.management.commands.aoki_setup_est_onboarding_test_env.Command(stdout=None, stderr=None, no_color=False, force_color=False)

Bases: pki.management.commands.base_commands.CertificateCreationCommandMixin, trustpoint.logger.LoggerMixin, django.core.management.base.BaseCommand

Creates a Trustpoint test environment for DevOwnerID EST onboarding testing.

help = 'Creates a local issuing CA, domain, and device for DevOwnerID EST onboarding testing. The...

log_and_stdout(message, level='info')

Log a message and print it to stdout.

Parameters:

• message (str) – The message to log and print.

• level (str) – The log level ('info', 'warning', or 'error').

Return type:

None

handle(*args, **kwargs)

Execute the command.

Parameters:

• args (Any) – Additional positional arguments (unused).

• kwargs (Any) – Additional keyword arguments (unused).

Return type:

None