-
Notifications
You must be signed in to change notification settings - Fork 16
Description
spdm-dump supports export the cert chain from GET_CERTIFICATE command.
Would you help expand it to support SET_CERTIFICATE as well?
[--cert_chain_format] is required before any cert chain file parameter. Default is SPDM.
SPDM means cert chain file includes the Length, Reserved, or RootHash fields. It is needed if root_cert is absent.
RAW means cert chain file does not include the Length, Reserved, or RootHash fields.
[--req_cert_chain_slot_id] is required just before [--req_cert_chain]
[--req_cert_chain] is required to if encapsulated GET_CERTIFICATE is not sent
[--rsp_cert_chain_slot_id] is required just before [--rsp_cert_chain]
[--rsp_cert_chain] is required to if GET_CERTIFICATE is not sent
[--out_req_cert_chain_slot_id] is required just before [--out_req_cert_chain]
[--out_req_cert_chain] can be used if encapsulated GET_CERTIFICATE is sent
[--out_rsp_cert_chain_slot_id] is required just before [--out_rsp_cert_chain]
[--out_rsp_cert_chain] can be used if GET_CERTIFICATE is sent
format: A file containing certificates defined in SPDM spec 'certificate chain format'.
It is one or more ASN.1 DER-encoded X.509 v3 certificates.
It may include multiple certificates, starting from root cert to leaf cert.
It is defined by [--cert_chain_format].