Home

User manual GT Prove ePP

1. Transformation Batch validation PDE Tools Properties The following dialog appears 2009 HJP Consulting GmbH Borchen All rights reserved Develop GlobalTester test scripts CS Project we other Ctrl h 49 Develop GlobalTester test scripts Ek Select a wizard gt Creates a new GlobalTester test case Wizards type filter text amp Class Ti Interface Ge Java Project Java Project from Existing Ant Buildfile ie Plug in Project General hb Author GES CVS D S GlobalTester y if Sample Test Case HLS Java Cancel Here you can select to create a New Test Case a New Test Suite or aSample Test Case The option to select a Sample Test Script would create a new test script already filled with some code and comments you can use as a quick example for your own development When you have created a few test scripts it may be usefull to combine them to test suites See the section called Creating test suites T52 for details For now select New Test Case and click Next You will see a dialog as below Here select the project to create the test case in a name for the test case and click Finish 2009 HJP Consulting GmbH Borchen 50 All rights reserved Develop GlobalTester test scripts New GlobalTester test case New test case Create new test case Enter or select the parent Folder Simple TestProject TE SimpleTestProject File namek SimpleTestCase
2. E 23 testsuite_BAC xml 3 AS Y IT Test Explorer 52 User Interface of GlobalTester FEY IT Globaltester Java Team Synchr BE kk 2xm1 version 1 0 encoding I50 8859 1 standalone no gt jy TestSuites a ey Layer Ey TestSuitea 6y TestSuiteB ey TestSuiteC Gy TestSuiteD 6y TestSuiteE Sy TestSuiteF Ey TestSuiteG fed testsuite _BAC xml fea testsuite_complete_standa FA testsuite_ICAO xml lt testsuite gt lt version gt 2 0 3 lt version gt lt date gt 20090406 lt date gt lt author gt Holger Funke lt author gt lt shortdescription gt Tests of Basic Access Control FA testsuite_Oddins xml lt shortdescription gt i lt description gt f testsuite _Plain xml Tests of Basic Access Control gt LA lt description gt E Properties T lt specificationname gt nm Arm T lt specificationname gt testsuite a testsuiteid Profile BAC ee crid Author version 2 0 3 date 20090406 JT Result View 83 Dz ene ox Outline 2s mam an an an E Console B Problems lt DOCTYPE testsuite SYSTEM testsuite dtd gt lt xml stylesheet type text xsl href testsuite xsl gt lt testsuiteid gt Profile BAC lt testsuiteid gt lt company gt HJP Consulting GmbH lt company gt BSI TR 03105 Part 3 1 Test plan for application protocol and logical data structu author Holger Funke
3. Status Profile BAC 7816_C_4 This tests check the error response to the mutual authenticate com 0 469 Profile BAC 7816_C_5 This tests check the response for the mutual authenticate command 0 453 specificationversion Version 1 1 1 14 globalpreconditions HH testcases Profile BAC 7816_C_12 The tests verifies the SecureMessaging handling while BAC is active 1 0 Profile BAC 7816_C_13 The tests verifies the SecureMessaging handling while BAC is active 1 015 Profile BAC 7816_C_14 The tests verifies the SecureMessaging handling while BAC is active 1 032 Profile BAC ov Y Y Profile BAC 7816 _C_10 This tests checks the Secure Messaging coding of a Select File and 1 125 oy Y Y Y 4 D 7816_C_15 The tests verifies the SecureMessaging handling while BAC is active 0 937 Writable Insert Lil GlobalTester Perspective Eclipse offers the user the ability to select different predefined view configurations on the application so called perspectives GlobalTester adds its own perspective to Eclipse This perspective combines the GT TestExplorer view the GT Result view and uses your installed XML Editor to view the XML test files 2009 HJP Consulting GmbH Borchen 19 All rights reserved HJP CONSULTING GlobalTester GT Scripts EPP BAC BSI TestSuites _ayer6 testsuite_BAC xml Eclipse Platform File Edit Navigate Search Project Run XML Window Help Ao Heinie igo eo ae M werg x OKA BEA
4. documentation area Answers to your technical questions can be found in the FAQ area which you should use as a knowledge base for your test tools For further technical support you can contact us directly at any time via e mail to support hjp consulting com You can also contact us by phone on 49 5251 4177649 on working days between 09 00 17 00 CET We will provide you with technical answers in German English or Russian regarding the use of GlobalTester TestManager and the GlobalTester Prove tools Initial replies to questions will be sent by us within a response time of one working day 2009 HJP Consulting GmbH Borchen 55 All rights reserved About HJP Consulting Chapter 8 About HJP Consulting HJP Consulting is an internationally active firm of consultants specialising in the planning procurement and approval of smart card solutions with a focus on the e passport e ID and e health sectors HJP Consulting offers consultancy training and testing tools HJP Consulting is highly involved in worldwide standardisation activities in the e passport area and has consequently been appointed co chair of the editorship of the ICAO test standards released by the ICAO TAG MRTD in April 2006 In 2008 on behalf of the German Federal Office for Information Security BSI the HJP Consulting team developed the enhanced TR 03105 part 5 test specification for e passport inspection systems with Extended Access Control EAC HJP Cons
5. mandatory BAC UNDEFINED Accessing the EF COM File with explicit file selection Tests of Basic Access Control Locale Testing Mode 1 45 Close If you use test cases that rely on MRZ data and you selected to use the MRZ dialog in the preferences see the section called Changing ePassport Preferences 26 the MRZ dialog will show up now immediately before the test starts 2009 HJP Consulting GmbH Borchen 37 All rights reserved Using test scripts HJP CONSULTING Note If you enabled it in the preferences this dialog will also appear in tests that do not use the MRZ for those tests you can either select a MRZ you want or you diable it in the preferences see the section called Changing ePassport Preferences 25 Please enter MR or read via MRZ Reader MERE 2 CLITOUZIHS De lt 960d 1224 F131031r lt i lt lt lt lt i lt lt lt h Here you can enter the MRZ of the e passport you wish to connect to either via your keyboard or you use a MRZ reader The MRZs you used in this dialog are stored automatically and you can easily select them from the dropdown menu to reuse them very quickly Note The MRZs stored are located in the file called MRZHistory txt which is located in the org globaltester testmanager VERSION subdirectory of the plugin directory of your Eclipse installation Here you can edit add or delete entries in ca
6. DOCTYPE testsuite SYSTEM testcase dtd gt lt xml stylesheet type text xsl href testcase xsl gt J lt testsuite gt lt testsuiteid gt lt testsuiteid gt lt version gt lt version gt lt date gt lt date gt lt author gt lt author gt lt company gt lt company gt lt shortdescription gt lt shortdescription gt lt description gt lt description gt lt specificationname gt lt specificationname gt lt specificationversion gt lt specificationversion gt lt globalpreconditions gt lt globalpreconditions gt gt lt testcase gt lt testcaseid gt lt testcaseid gt lt shortdescription gt lt shortdescription gt lt description gt lt description gt lt quality gt lt quality gt E The information displayed covers a description of the test preconditions to be satisfied before the test is executed data passed to the card and the expected results In some cases a test procedure contains multiple test cases for example the BAC test These cascaded tests are reflected in the XML source where multiple test cases are grouped together in an test suite 2009 HJP Consulting GmbH Borchen All rights reserved 43 Using test scripts HJP CONSULTING IT Test Explorer 2 m a SimpleTestCase xml fed SampleTestCase xml fe SimpleTestSuite xml 52 x i lt 7xml wersion 1 0 encoding IS0 8859 1 standalone no gt a lt IDOCTYPE testsuite SYSTEM
7. Data CFG CERTS TA CFG DFLT EAC CYCA_Key_O1 bin private key C Dokumente und Einstellungen amay workspaces runtime gt2 Fresh GT Scripts IS EAC BSTitestsuites Data CFG CERTS TA CFG DFLT EAC CVCA_Key_O1 pkcs8 v Signature algorithm ecdsaWithSHA256 CARICHR DETESTC YCA00001 EffDate 090616 ExpDate 100611 C Add the domain parameters in C CA link certificates static EAC Certificates Restore Defaults Apply Put the location of your root public key e g C publicKeyROOT bin and root private key e g C privateKeyROOT pkcs8 in the appropriate fields Select the correct signature algorithm from the dropdown menu Enter the name of the CAR in the fiel as stored in EF CVCA of the e passport Enter the effactive date and expiry date in the appropriate fields as BCD Y YMMDD Now you can generate the certificate sets 2009 HJP Consulting GmbH Borchen 29 All rights reserved Using test scripts HJP CONSULTING Chapter 4 Using test scripts When you first start Eclipse in the GlobalTester perspective you will see a completely empty workspace GlobalTester Eclipse SDK File Edit Navigate Search Project Run Window Help mile oT gt Q7 g i E Of GlobalTester amp 7 7 Test Explorer 2 SE 5 G 0 z oa o amp Outline 2s L Properties 4n outline is not available ST Result view EJ console 22 No consoles to disp
8. Environment What s new in version 1 3 1 e Minor bugfixes What s new in version 1 3 e Usability User can define default reader buffer size e Usability User can define default MRZ instead of fixed silver data set e Usability New look and feel in preference pages e Usability Choose last selected MRZ in start dialog automatically e Updated library Bouncycastle 1 38 for Java 1 5 e Usability Check for changed files before starting test runner and ask user to save them 2009 HJP Consulting GmbH Borchen 58 All rights reserved What s new What s new in version 1 2 10 e Hash value of ephemeral key corrected for ECC with algo SHA224 What s new in version 1 2 9 e Updated fingerprint for new EAC test implementation test spec v1 1 What s new in version 1 2 8 e Updated fingerprint for new EAC test implementation test spec v1 1 What s new in version 1 2 8 e Logging Use hour in format 0 23 instead of 1 24 e Bugfix Allow comments at the then end of line in test script What s new in version 1 2 7 e EAC Calculating hash of ephemeral key as extra method needed for RSA e Classes with EAC signature methods are now part of package com hjp globaltester security eac e Bugfix Cutting leading 0x00 in ephemeral during key generation RSA What s new in version 1 2 6 e Bugfixes for EAC CA DH and RSA What s new in version 1 2 5 e Check integrity for EAC Tests e Bugfixes for EAC What s new in version 1 2 4 e EAC new methods t
9. TestSuite TestCaseID Description Times Status company HJP Consulting GmbH shortdescription Tests of Basic Access description Tests of Basic Access Cont specificationname BSI TR 03105 Part specificationversion Version 1 1 1 14 globalpreconditions testcases Profile BAC Profile BAC Profile BAC Profile BAC Profile BAC Profile BAC Profile BAC Profile BAC Profile BAC 7816_C_4 7816 C5 7816_C_6 7816_C_8 7816_C_10 7816_C_12 7816_C_13 7816_C_14 7816_C_15 This tests check the error response to the mutual authenticate com This tests check the response for the mutual authenticate command This tests check the response for the mutual authenticate command This tests checks the Secure Messaging coding of a Read Binary B0 This tests checks the Secure Messaging coding of a Select File and The tests verifies the SecureMessaging handling while BAC is active The tests verifies the SecureMessaging handling while BAC is active The tests verifies the SecureMessaging handling while BAC is active The tests verifies the SecureMessaging handling while BAC is active 0 469 0 453 0 875 1 156 1 125 1 0 1 015 1 032 0 937 7 y 7 7 v v 7 y writable Insert dl TestExplorer view 1 and Result view 2 are described in the following sections In the center of the perspective you can select which detailed elements are to be viewed for example the content of the XML test scripts
10. and can be helpfull to identify the reports later and to assocciate them with the different test situations Changing Logging Preferences On the Logging preferences page you can select where logfiles should be stored what format they should have and to what level messages are logged Preferences type filter text Logging E General Ant Author Directories and files GlobalTester Manual setting of directories and files CLT One ePassport Failure Interface Simulator Logging of GlobalTester Framework _ Activate additional HTML log file TestManager Help Use standard logging plain text file Install Update Use 150 8601 logging in text file Jere J Activate additional logging to STDOUT Plug in Development RunjDebug Level of logging Team GlobalTester preference page TRACE ERROR FATAL everything is logged only Fatal problems are logged Logging of test runs C Use same options as for framework logging C Activate additional HTML log file Use standard logging plain text File Use 150 8601 logging in text file Level of logging TRACE ERROR FATAL everything is logged only Fatal problems are logged Restore Defaults Apply Changing ePassport Preferences On the ePassport preferences page you can configure parameters for connections to e passports 2009 HJP Consulting GmbH Borchen 25 All rights reserved User Interface of GlobalTester HJP C
11. conformity test specification for example use so called Test Profiles A test profile means a subset of elements that must be fullfilled These test profiles will be represented by different test suites so each e passport can be tested with only the test suites that it needs to fullfill HJP Consulting has developed test suites which allow you to test your products for conformance with the BSI ePassport conformity test specification relating to layers 6 and 7 These test suites will be used in this chapter as an example 2009 HJP Consulting GmbH Borchen 30 All rights reserved HJP CONSULTING GlobalTester GT Scripts EPP BAC BSI TestSuites _ayer6 testsuite_BAC xml Eclipse Platform File Edit Navigate Search Project Run XML Window Help abdi i mie i Q iae river MWa amp e amp Wyy x w D 4 SEM IT Test Explorer 52 O Le testsuite _BAC xml 22 B zi k2xm1 version 1 0 encoding I50 8859 1 standalone no gt lt DOCTYPE testsuite SYSTEM testsuite dtd gt lt xml stylesheet type text xsl href testsuite xsl gt jy TestSuites a ey Layer Ey TestSuiteA 6y TestSuiteB ey TestSuiteC Gy TestSuiteD 6y TestSuiteE jy TestSuiteF Ey TestSuiteG fed testsuite_BAC xml fea testsuite_complete_standa fed testsuite_ICAO xml FA testsuite_OddIns xml lt testsuite gt lt testsuiteid gt Profile BAC lt testsuiteid gt lt version gt 2 0 3 lt version gt lt date gt 200904
12. develop your own test scripts see Chapter 5 Develop GlobalTester test scripts 46 For BSI and CAO conform testing of electronic passports HJP Consulting offers test scripts within their GT Prove ePP product Likewise HJP Consulting offers a product for testing inspection systems called GT Prove IS There are two possibilities to install GlobalTester test scripts Either as plug ins that are imported to your workspace by GT TestManager or you can import the scripts as project from a ZIP file The more convenient way is the installation as plug in as you can simply select the features together with your GlobalTester Plug ins form the same update site so this is the recommended way Install Script Plug ins You can select the plug ins for the appropriate scripts from the same update site as you installed the GT Prove EPP Plug in using the same installation routine Here you will find a feature called GT Scripts EPP for test suites Simply select this from the update site and install it The plug ins will be installed in your Eclipse installation and when you next start your Eclipse installation you will be prompted with the following dialog whether the scripts should be installed in your workspace Click Yes to install them GT Scripts EPP EAC BSI Manager D You are using GlobalTester and vou have downloaded test scripts via update You need these scripts in our workspace to execute them Should GlobalTester install these scripts
13. or a test report The elements are opened by double clicking on the element required within the TestExplorer view The selection of the appropriate viewer editor is handled by Eclipse automatically We suggest that you select the GlobalTester perspective when working with tests and results You can easily do that by selecting Window from the main menu followed by Open perspective Then select Other Help Mew vin Mew Edit dow or Open Perspective Showy Customize Perspective EU Save Perspective S Reset Perspective Close Perspective Close All Perspectives Navigation Preferen 2009 HJP Consulting GmbH Borchen All rights reserved CES an hy Java Browsing _ header SYSTEM 1 Lyvpe text xsl hi 20 User Interface of GlobalTester In the Open Perspective dialog select GlobalTester and click OK Open Perspective x hy Java Browsing ed Java Type Hierarchy Plug in Development ly Resource default EU Team Synchronizing The Test Explorer View In the TestExplorer you can view the structure of the test suites and the associated test cases It is quite similar to the well known package explorer view of Eclipse but adds filters for a more convenient view on the test files and integrates better into the workflow of running tests and evaluating results Tests to be executed are selected in this area Selection of the appropriate test cases is ach
14. testsuiteid ae cra Author p IT Result View Console 3 RS rf po E author Oxygen messages company 09 53 39 Content Completion schematis changed file C Dokumentes20und 20Einstellunge shortdescription 09 53 40 Content Completion schema s changed file C Dokumente 20und 20Einstellunge description 09 53 40 DTD XML Error Scanner start scanning file C Dokumente ZOund 20Einstellunge specificationname 09 53 40 Found O problem s specificationversion globalpreconditions testcase Writable Insert The file will be filled with the needed template for a simple test case For a well commented example create a Sample Test Case as described above In that test case you should find enough examples and hints on how to design and develop your own test cases You will see the test script tag which is filled with CDATA This CDATA is code written in ECMAScript language The language specification can be found at http www ecma international org publications files ecma st ECMA 262 pdf Also preconditions and postconditions are defined using ECMAScript Creating test suites Test suites offer the possibility to combine different test cases to one unit that can easily be managed and executed as one session Within test suites the used test cases are only referenced this means you will need to define test cases in single files before your test suite can be executed Creating a new test suite is nearly the same as creatin
15. the menu item Install Update and select the submenu Automatic Updates Then activate the automatic update mechanism by pressing the check button Automatically find new updates and notify me You may customize this update mechanism according to your needs 2009 HJP Consulting GmbH Borchen 18 All rights reserved User Interface of GlobalTester HJP CONSULTING Chapter 3 User Interface of GlobalTester GlobalTester contributes in many different ways to the user interface of your Eclipse installation It offers its own views an own perspective adds toolbar items and preferences pages and integrates into the online help system These different contributions will be described further in the following section GlobalTester Perspectives and Views GlobalTester introduces a new perspective and two new views to your Eclipse platform The following screenshot shows an Eclipse platform using GlobalTester perspective with active TestExplorer view 1 and Result view 2 GlobalTester GT Scripts EPP BAC BSI TestSuites _ayer6 testsuite_BAC xml Eclipse Platform File Edit Navigate Search Project Run XML Window Help Ci Be tinh iQ i we E l amp MWe amp Wys x f D 4 SEM id IT Test Explorer 52 O bed testsuite BAC xml 2 amp k k xm1 version 1 0 encoding I50 8859 1 standalone no gt I r r S E TestSuites a age testsuite see a gt R S y Layer lt xml stylesheet type text xsl href tests
16. understand the issues in detail you need to be familiar with the test specifications of your test cases If you use GT Prove ePP these are the BSI and ICAO specifications 2009 HJP Consulting GmbH Borchen 42 All rights reserved Using test scripts HJP CONSULTING GlobalTester provides a description of the test case 1 the data passed to the card 2 the expected result 3 and the data received from the card 4 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 aaa a 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 2006 03 31 10 56 45 734 10 56 45 734 10 56 45 734 10 56 45 734 10 56 45 734 10 56 45 734 10 56 45 734 10 56 45 734 10 56 45 734 10 56 45 612 10 56 45 828 10 56 45 828 10 56 45 820 10 56 45 828 10 56 45 626 10 56 45 628 10 56 45 026 10 56 45 828 10 56 46 015 10 56 46 015 10 56 46 015 10 56 46 015 10 56 46 015 10 56 46 015 10 56 46 015 10 56 46 015 10 56 46 015 10 56 46 015 10 56 46 031 10 56 46 031 10 56 46 031 DEBUG a DEBUG Starting new test case DEBUG Testcase ID 7616_A1 Q DEBUG Testcase Short Description DEBUG Testcase Description Selecting the LDS Application using the AID positive test DEBUG Test
17. 06 lt date gt lt author gt Holger Funke lt author gt lt company gt HJP Consulting GmbH lt company gt lt shortdescription gt Tests of Basic Access Control lt f shortdescription gt lt description gt Tests of Basic Access Control v amp lt description gt DE Outline 53 E Properties 0 lt specificationname gt fr testsuite_Plain xml J gt BSI TR 03105 Part 3 1 Test plan for application protocol e T lt specificationname gt testsuite lt wwe nmeneemms ent testsuiteid Profile BAC Grid Author version 2 0 3 lt date 20090406 ST Result View 22 E console 22 Problems Using test scripts and logical data structu author Holger Funke company HJP Consulting GmbH shortdescription Tests of Basic Access description Tests of Basic Access Cont specificationname BSI TR 03105 Part specificationversion Yersion 1 1 1 14 globalpreconditions testcases TestSuite TestCaseID Description Status Writable Insert GlobalTester Scripts EPP For testing of e passports HJP Consulting has written a set of test scripts that deal with the following specifications e BSI TR 03105 Part 3 1 e ICAO RF PROTOCOL AND APPLICATION TEST STANDARD FOR E PASSPORT PART 3 e BSI Test plan for eMRTDs with EAC You can download them from http www hjp consulting com support if they are part of your subscription To see how to install them refer to the secti
18. 7 Whats new in GT TestManag r cc cincscicadncnncadenndarssancandad nc diced na aa kadena dort due aS 57 Whats new inm OT Prove CPP des se a ue 61 2009 HJP Consulting GmbH Borchen il All rights reserved Before you begin Chapter 1 Before you begin Overview Thank you for using GlobalTester GlobalTester provides a platform to manage testing and analysis of smart cards and e passport applications GlobalTester is delivered as a set of plug ins for the popular Eclipse platform and allows the execution of a set of test scripts structured with XML and defined using Java Script It is based on Open Source projects such as Smart Card Shell and supports the GlobalPlatform standard GT TestManager can be used to create and execute individual test suites or in automated batch processing typically required during final acceptance testing An intuitive easy to use interface improves productivity A simple visual pass fail notification system immediately indicates where non conformities have been detected GT TestManager is the base platform for the application of the test tools of the GT Prove family GT Prove IS allows users to prove the conformance of e passport inspection systems GT Prove ePP enables organisations to test e passports for conformity Both test tools prove conformity with the latest test standard Other GT Prove test suites are planned Users are welcome to develop their own test suites Interoperability betwe
19. Apache Software Foundation http fm apache org Plug in Details Konfiguration Details You should then scroll down in the list of plug ins which are installed and you will see the entries for GlobalTester TestManager GlobalTester Logging and GlobalTester OnlineHelp In the screenshot below you see the GlobalTester Prove EPP and GlobalTester Prove IS To test e passports using GT Prove ePP together with the corresponding test scripts you will need the GlobalTester Prove EPP Plug in About Eclipse Platform Plug ins Provider Eclipse org Eclipse org Eclipse org HJF Consulting GmbH HJF Consulting GmbH HJF Consulting GmbH HJF Consulting GmbH HIP Consulting GmbH HJF Consulting GmbH HJF Consulting GmbH HJF Consulting GmbH HJF Consulting GmbH HJF Consulting GmbH HJF Consulting GmbH HJF Consulting GmbH HJF Consulting GmbH HJF Consulting GmbH HJF Consulting GmbH HIP Consulting GmbH HJF Consulting GmbH HJF Consulting GmbH IBM Corporation Legal Info Note Plug in Mane JFace Data Binding For 5 Equinox Provisioning Nativ Subversive SYM Team Pro GlobalTester SecureMessa GlobalTester e passport d GlobalTester Simulator GlobalTester TLY Manipula GlobalTester Logging GT_Scripts EPP BAC BSI GlobalTester CLT One GT_Scripts EPP BAC ICA GlobalTester Base Plug in GlobalTester TestManager GlobalTester Applets e pa GlobalTester Prove EPP GlobalTester Prove 15
20. B Lay TestSuiteC Loy TestSuiteD bea testsuite complete standarc be testsuite _LOS A xml kel bestsuite_LDS_B xml be testsuite _LOS_ C xml k bestsuite_LDS_D xml B ReadMe txt Mi TOS PT Pole CAM AA ts lt Mm gt hl In the Specification folder the original test specifications are stored for reference in case of any problems The TestSuites folder contains the test case and test suite files for the tests Test suites and test cases to test your product are located in the folders Layer 6 and Layer 7 below the TestSuites folder Each of the folders contains different subfolders for the specific test cases and multiple XML files containing test suites for execution of different parts of the specified tests So you can easily run complete tests of different test units or the whole specification as well as execute single test cases for special treatment ICAO profiles It is important to understand that the ICAO specification defines several optional elements which can be supported by an e passport This includes such items as the BAC and AA security elements as well as additional data groups DG3 DG16 When testing an e passport you need to understand which elements are supported by the passport its profile A test must only be performed if an e passport supports the functionality associated with the profile Usage of Generation Scripts The project GT Scripts EPP EAC BSI has an additional subfolder called Generate_Data Th
21. Cancel Now you should see the new test case as XML file in the TestExplorer and the file will be opened in the editor 2009 HJP Consulting GmbH Borchen 51 All rights reserved Develop GlobalTester test scripts HJP CONSULTING GlobalTester SimpleTestProject SimpleTestCase xml Eclipse SDK File Edit Navigate Search Project XML Run Window Help roe Bim ih Tae iwP E E LT Globaltester w w amp IW Ww we x of af OFA es E Hs Tal Java IT Test Explorer 22 O f Le SimpleTestCase xml 22 zZ B i k xm version 1 0 encoding I50 8859 1 standalone no gt lt DOCTYPE testsuite SYSTEM testcase dtd gt hs ai F r we st fed SimpleTestCase xml lt xml stylesheet type text xsl href testcase xsl gt lt testsuite gt lt testsuiteid gt lt testsuiteid gt lt version gt lt version gt lt date gt lt date gt lt author gt lt author gt lt company gt lt company gt lt shortdescription gt lt shortdescription gt lt description gt lt description gt lt specificationname gt lt specificationname gt lt specificationversion gt lt specificationversion gt lt globalpreconditions gt lt globalpreconditions gt lt testcase gt lt testcaseid gt lt testcaseid gt Tz Outline 52 E Properties E lt shortdescription gt lt shortdescription gt z lt description gt lt description gt E amp T o e lt quality gt lt quality gt testsuite
22. GT Prove ePP User Guide Manual GT Prove ePP User Guide Manual Release 2 2 0 Publication date 30 June 2009 Copyright 2009 HJP Consulting GmbH Borchen Germany GT Prove ePP User Guide Table of Contents ls Belore YOU DOIN a danses Lane dec E corn ee ni l Da a E EE E E E 1 DY SECM REUE MENS eE EEEE l ONS ee E sacs ast sinters ioe E E E 1 FOWO O a E EEE 2 SA E A A nes nace eee a 3 SR A cots N 3 POS ANN CDS a te i Installing Global Tester PIMOS nsc ares decembre 4 Installing GlobalTester Plug ins offline eens eeeeeeeeaeeseneeaenneas 11 Checking that GlobalTester was successfully installed 11 Installing GlobalTester test scripts c cece cece ence cence eee eee eee ee eens sees eens ee eee enna enn enes 13 Tostal SCD PIUS RS en ee soit t ii eo tee ton 13 Install scripts manually ccc cece cece cence eee n ence ie eE RE EEA En 13 Updating Global Tester PINA INS 2 ie de ho lots 16 Manually Updating GlobalTester cece cece cee c ene eceeeee eee eeenseeeeseeeeaeneeas 16 Automatically Updating GlobalTester Plug ins 20 17 3 User Intertace of Global Tester nn Reed cnrs ie haies 19 GlobalTe ster Perspect ves and VIEWS 2 ns silence 19 GloDal lester PES D C a eee te nee net ordi 19 Whe Test Explorer View ns a dr eee cet ciel 21 TOR ARC EN er 22 Seine Global Tester PremerenCes 2 ee ee nes ares passeront 23 Cha
23. GT_Scripts EPP_EAC BSI GT_ Scripts 15 EAC_ESI Fl GlobalTester Certificates GlobalTester OnlineHelp GT Scripts EPP Basics Pl International Components Show Signing Info Columns Version 1 2 1 M2008 1 0 0 20085 0 7 0 IT20090 420 2 2 0 2 2 0 2 2 0 2 2 0 220 4 2 0 2 2 0 2 2 0 2 2 0 2 2 0 22 0 a2i0 2 2 0 2 2 0 2 2 0 22 0 2 2 0 a1 v2008 Plug in Id oa org eclipse jface databinding org eclipse equinox p2 touc org eclipse team swn core com hjp globaltester epassp com Ajp globaltester epassp com hip globaltester simulator com hjp globaltester tlermani org globaltester logging GT Scripts EPP BAC BSI com hjp globaltester clone GT Scripts EPP Bac Cac org globaltester org globaltester testmanager com hjp globaltester simulat com hjp globaltester prove com Hip globaltester prove is GT Scripts EPP EAC BSI GT Scripts 15 EAC BSI com hjp globaltester epassp org globaltester onlinehelp GT _Scripts_ EPP Basics com ibm icu As of release 2 1 0 the plug ins are not digitally signed so the signature icons in the first column will be broken 2009 HJP Consulting GmbH Borchen All rights reserved 12 Getting Started Installing GlobalTester test scripts After successful installation of Eclipse and the GlobalTester Plug ins all you need to run tests are test scripts that define test suites and appropriate test cases To
24. ONSULTING Preferences type filter kext ePassport General Ant Author MRZ reader GlobalTester Use MRZ reader dialog CLT One Default MRZ1 PXUTOERIKSSON lt lt 4NNa lt MaR accede cece cece H ePassport Pare le tac Default MRZZ LS9S 902 lt 3UTO6908061F94062367E184276B lt lt lt lt lt 14 Logging Buffer Simulator Read buffer size TestManager 233 Help Install Update Java Read data groups by checking header information fast E GlobalTester Settings For ePassports il T Alternative ways For JavaScript Function readFileE Ore l Plug in Development O Read data groups byte by byte very slaw Runi Debug Team Restore Defaults Apply The upper lets you choose whether to use the dialog for entering a MRZ or not If you need the MRZ for your tests you need to enable this checkbox Now a dialog appears during tests that use the MRZ see the section called Starting stoping and skipping tests 37 If you choose not to enter the MRZ during test execution you can change the default value here these values will be available to the scripts as 1f they where entered via the dialog In the lowest part of the preference page you can control parameters of the connection buffer The buffer size is the maximum number of bytes that can be read at once from the passport when reading data files Additionally the user can control how data groups are read Reading by checking header informat
25. ONTROL EAC TESTS FOR SECURITY IMPLEMENTATION v 1 11 Integrity of test cases The test suites provided by HJP Consulting e g those relating to the BSI ePassport test specifications are protected with a checksum You may modify the tests but HJP Consulting will then not assume any responsibility for the accuracy of the tests If you have modified a test script you will see the message Warning Integrity of test cases is not assured This version of tests was modified since delivery By clicking on OK you can continue with the test Tests you developed based on the sample test script or from scratch should not produce this warning Selecting and executing tests Tests to be executed are selected by clicking the relevant entry in the TestExplorer view In this example the test suites BAC and ICAO have been selected 2009 HJP Consulting GmbH Borchen 34 All rights reserved Using test scripts HJP CONSULTING CS Package Explor 23 fs Hierarchy O Fl 5 d E i TestSuites E i Laver Lay TestSuites E l TestSuiteB E l TestSuitec Loy TestSuiteD E Loy TestSuiteE th Loy TestSuiteF Hbc TestSuites TA testsuite BAC xml fea testsuite complete standa fea testsuite_IC AO xml fea testsuite_OddIns xml k testsuite_Plain xml GE Layer Hbc TestSuites Ii St oT So lt im gt WW wt The selected tests are executed by pushing the HJP Logo Start GlobalTester in the toolbar File Edit Sour
26. PPLEMENTAL LICENSE TERMS COLLECTIVELY AGREEMNENT PLEASE READ THE AGREEMENT CAREFULLY BY DOWNLOADING GR INSTALLING THIS SOFTWARE YOU ACCEPT THE TERMS OF THE AGREEMENT INDICATE ACCEPTANCE BY SELECTING THE ACCEPT BUTTON At THE BOTTOM OF THE AGREEMENT IF YOU ARE NOT WILLING To FE BOUND BY ALL THE TERMS SELECT THE DECLINE BUTTON In the next screen the installer displays a Custom Setup screen that allows you to choose program features to set up and where to install the JOK We recommend to keep the default settings unless you are an advanced user who wants more precise control over the components that will be installed Custom Setup Select the program Features you want installed Select optional Features to install From the list below You can change your choice of Features after installation by using the Add Remove Programs utility in the Control Panel Feature Description Development Tools Javal TH SE Development Kit 6 Update 12 including private JRE 6 Update 12 This will require Source Code 300M6 on your hard drive Public JRE Java OB Demos and Samples Install to Ci Programme Javaljdkl 6 0_ 121 Click the Next button to continue with the installation Now that you have given the installer all of the information it needs to proceed progress boxes track the installation process 2009 HJP Consulting GmbH Borchen 4 All rights reserved Getting Started Installing The program Features vou selec
27. Project Reports gt 20090112155926 The default pathname for the reports is made up of the time and date that the test was executed on In the TestExplorer you can then select the report file which you wish to view 2009 HJP Consulting GmbH Borchen 44 All rights reserved Using test scripts t SimpleTestProject SC Logging ae Reports amp 200901 12161104 ox Report pdf g ka js xml Using the standard Windows Explorer and selecting the report file this will be displayed using your systems default viewer 2009 HJP Consulting GmbH Borchen 45 All rights reserved Develop GlobalTester test scripts Chapter 5 Develop GlobalTester test scripts GlobalTester tests are defined in GlobalTester test scripts There are two types of files GlobalTester uses for that purpose test cases and test suites A test case defines one test with its preconditions the test procedure and the postconditions to be evaluated after the test A test suite references several test cases to combine them to one unit Additionally test cases and test suites may have further descriptive elements like version author short and long descriptions etc This chapter will give a brief introduction in creating your own test scripts for use with GlobalTester Creating test cases To create new test cases you need to create a GlobalTester Project first When Eclipse is started in GlobalTester perspective right click in the TestExplorer or
28. Secure Messaging coding of 4 Select File and The tests verifies the SecureMessaging handling while BAC is ackive The bests verifies the SecureMessaging handling while BAC is active The tests verifies the SecureMessaging handling while BAC is active The tests verifies the SecureMessaging handling while BAC is active The tests verifies the enforcement of SecureMessaging while BAC is Time s 0 469 0 453 0 875 1 156 1 125 1 0 1 015 1 032 0 937 1 015 Status failure Additional information on the kind of problems can be found in the Problems view This native view of Eclipse gives you a list of all test cases that failed or showed a warning yellow triangle By moving the mouse over an entry you will automatically receive a short description of the error 2009 HJP Consulting GmbH Borchen All rights reserved 22 User Interface of GlobalTester IT Result View fe Problems 2 E console m 2 errors 0 warnings 0 others Description Resource Path Location Type Errors 2 items Unexpected status word received Expected value 62 63 67 68 69 64 6E gt_20090109122632 log GT Scripts EPP BAC BSI Logging line 1023 GlobalTester Failure Unexpected status word received Expected value 67 68 69 64 6B 6C 6L gt_20090109122632 log GT Scripts EPP BAC BSI Logging line 1662 GlobalTester Failure A Setting GlobalTester Preferences The behaviour of GlobalTester is very configurable To change it to yo
29. Version Release Date Author Company Short Description Failures Warnings Description 2 0 3 Profile BAC 20090406 Holger Funke HIP Consulting GmbH Tests of Basic Access Control 0 0 Tests of Basic Access Control Test case ID Short Description Quality Profile References Status Description 7816_B_19 Security Conditions mandatory BAC PASSED Accessing the EF COM file with implicit File selection ReadBinary with SFI lt 5 45 gt From this dialog you can start and stop executing the tests see next section Starting stoping and skipping tests To start the execution of selected tests from the test execution dialog simply press the Start button GlobalTester TestRunner BSI TR 03105 Part 3 1 Test plan For application protocol and logical data structure Version 1 1 1 14 11 2008 Test session Failures Warnings Test suite ID Release Version Release Date Author Company Short Description Failures Warnings Description Profile BAC 2 0 3 20090406 ser HIP Consulting GmbH Tests of Basic Access Control 0 Test case ID Short Description Quality Profile References Status Description 7816_B_1 Security Conditions
30. age to set up an automatic update schedule Select the GlobalTester features you want to update and press Update The Eclipse Update Manager will check for updates at the referenced update site You will be asked for your username and password which you have received from us Please enter username and password and continue If there are updates the Update Manager will ask you whether to install these updates Automatically Updating GlobalTester Plug ins You can automate the GlobalTester Update Mechanism by simply changing your preferences in Eclipse Therefore open the preferences window by selecting Window in the main menu and then Preferences The following pop up window appears 2009 HJP Consulting GmbH Borchen All rights reserved 17 Getting Started HJP CONSULTING Preferences type Filter text Automatic Updates E Automatically Find new updates and notify me An H Author H GlobalTester Update schedule H Help Look for updates each time platform is started Insbalhfetprete Look For updates on the following schedule Automatic Updates dy H Plug in Development H Run Debug Team Download options Ce Search For updates and notify me when they are available Download new updates automatically and notify me when ready to install them When Updates are Found Ce Notify me once about updates Remind me about updates every Restore Defaults Apply Please go to
31. at the checked items will be installed Name Version GlobalTester TestManager 2 1 0 GlobalTester Prove EPP 2 1 0 fe GlobalTester Prove IS 2 1 0 Size 16 179 KB Details Cancel You will then be prompted to agree to the license conditions for GlobalTester The installation is started by clicking on Finish install Review Licenses Licenses must be reviewed and accepted before the software can be installed Items with licenses License text Name Version This program is free software you can redistribute it and or G GlobalTester TestM gt 10 modify it under the terms of the GNU General Public License eee Ost Manager Tol as published by the Free Software Foundation either version E GlobalTester Prove EPP 2 1 0 2 of the License or fat your option any later version S GlobalTester Prove IS 2 1 0 This program is distributed in the hope that it will be useful but WITHOUT ANY WARRANTY without even the implied warranty of MERCHANTABILITY or FITNESS FOR 4 PARTICULAR PURPOSE See the GNU General Public License for more details You should have received a copy of the GNU General Public License along with this program if not write to the Free Software Foundation Inc 51 Franklin Street Fifth Floor Boston MA 02110 1301 USA IF you would like to include this software or parts of it in your own software and do not publish your code under the GPL then you will need a commercial license From us Dual license P
32. case Quality mandatory DEBUG Running preconditions DEBUG card new ICAOCard INFO Waiting for card DEBUG load definedsserts js DEBUG Running test script DEBUG Step ID 1 ty DEBUG resp card send 0x00 Oxa4 0x04 Ox0C new ByteString i0 00 00 z 47 10 01 DEBUG gt Command APDU DEBUG 0123 4 5 6 7 8 9 BC DEF DEBUG mmnmanrencnmnamnenners miim an PEBUC 2 OOO 60 KAO GC OTA OO 66 OR AT iO OT aioe ee DEBUG DEBUG DEBUG lt Response APDU DEBUG 0123 4 5 6 7 8 9 ABCD EF DEBUG OERE DEBUG DEBUG assertStatusWord new rrav 9000 card SW toString HEX F DEBUG Expected status word s 9000 DEBUG Recelved status word 9000 O DEBUG Actual and expected return codes match Ok DEBUG assertResponse NODATA resp MF DEBUG Expected response NODETA DEBUG Received response DEBUG Actual and expected response match Ok Viewing test cases It can be beneficial to view the individual test cases when analysing errors Doubling clicking on the test case to be viewed in the TestExplorer automatically shows the XML source in an editor in the main user interface area IT Test Explorer 3 W SimpleTestProject fo SimpleTestCase xml o ca oz Outline 2s E Properties Dla amp 7 so ca MPICTESLL ASC XIM A k2xm1 version 1 0 encoding 150 8859 1 standalone no gt lt
33. ce Refactor Navigate Search Project Run Window Help i Gst gt i 0 a iswe ie TT coo Alternatively after selecting the tests to be run you can use the right mouse button to show the following menu 2009 HJP Consulting GmbH Borchen 35 All rights reserved HJP CONSULTING New Ci Open id Show In la Copy E Copy Qualified Mame TE Paste 2 Delete Build Path Refactor eg Import py Export we Refresh Assign Working Sets Debug As Team Compare with Replace with Transformation Batch Validation F3 AIE SHiFE 4 Chrlt e Ctrl Delete Alt Shift T Fa Tr i i F id br os By clicking on Run Test the tests will also be executed Using test scripts Assuming that the test cases have not been modified see the section called Integrity of test cases 34 you will see a dialog box which gives you details regarding the tests that have been selected including a description of the test suite the number of test cases in the suite and also a description of the individual test cases 2009 HJP Consulting GmbH Borchen All rights reserved 36 Using test scripts HJP CONSULTING GlobalTester TestRunner BSI TR 03105 Part 3 1 Test plan For application protocol and logical data structure Version 1 1 1 14 11 2008 Test session Failures Warnings L Locale Testing Mode Test suite ID Release
34. dMe txt Updating GlobalTester Plug ins Updates to GlobalTester are installed by using the same mechanism as described for the installation When you need to do an offline installation you will also need to do an offline update This means you will need to check regularly for updates and overwrite your local update site with the new data After updating your local update site you will be able to do the update using the same process as when using an online update site If you where able to use the preferred installation via the online update site you can do the update just as easy as well Also you will be able to configure automatic updates so that Eclipse will check for new versions and inform you so you can install them Manually Updating GlobalTester In order to search for updates of GlobalTester Plug ins you call the Update Manager by selecting Help in the main menu of Eclipse and then click Software updates The window Software updates and Add ons will pop up 2009 HJP Consulting GmbH Borchen 16 All rights reserved Software Updates and Add ons Installed Software Available Software Name L Eclipse SDK tt GlobalTester Prove EPP Oi GlobalTester Prove IS Oct GlobalTester TestManager GEGT Scripts EPP GEGT Scripts 5 EAC BSI Getting Started Verser Ce D nt 3 4 0 M20080911 1 00 2 1 0 2 1 0 2 1 0 2 1 0 2 1 0 Revert Configuration Open the Automatic Updates preference p
35. ditions m1 By moving the mouse over the marker the error type is shown clicking on the marker takes you straight to the corresponding entry Understanding log files GlobalTester provides comprehensive logging functionality to both document test cases and to provide debugging information Log files are automatically named with the prefix gt_ followed by the current date and time and are found in the Logging area within the TestExplorer CT Test Explorer 2 5 ys S SEX GT Scripts EPP BAC BSI Hs Lagging gt 20090109121613 loq gt 20090109121625 loq gt_ 2009010912263 log gt 20090112143441 log gt 2009011214525 log gt 20090112145839 log gt Reports Loy Specification H b eg PestSuites B ReadMe txt HE GT Scripts EPP BAC ICAO HE GT Scripts EPP Basics HER GT Scripts EPP EAC BSI Lt GT Scripts 15 EAC BSI v gt By double clicking on the relevant log file this is displayed in the editor in the main user interface area 2009 HJP Consulting GmbH Borchen 41 All rights reserved Using test scripts HJP CONSULTING fed testsuite_BAC xml fed 7816_A_01 xml E gt_20090112145225 log 22 2009 01 12 14 52 44 828 INFO Received status word 90 2009 01 12 14 52 44 828 INFO Test failure The actual and expected returncodes do not match 2009 01 12 52 44 826 WFO FailurelID25 Unexpected status word received 2009 01 12 14 52 44 825 INFO Running postconditions 2009 01 12 14 52 44 828 INFO Test case
36. e Messaging coding of Read Binary B0 This tests checks the Secure Messaging coding of 4 Select File and The tests verifies the SecureMessaging handling while BAC is ackive The bests verifies the SecureMessaging handling while BAC is active The tests verifies the SecureMessaging handling while BAC is active The tests verifies the SecureMessaging handling while BAC is active The tests verifies the enforcement of SecureMessaging while BAC is 0 469 0 453 0 875 1 156 1 125 1 0 1 015 1 032 0 937 1 015 v A v Y oy ov ov ov Tests which were successfull are shown with a green tick and those failing with a red cross Right click on an entry opens a context menu which gives you the option to open the testcase or the according logfile for further investigation of the problems IT Result view EE Test5uite Profile BAC Profile BAC Profile Bac Profile BAC Profile BAC Profile Bac Profile BAC Profile BAC Profile BAC Profile BAC E console N Problems Test aselD 7816C 4 7816 C5 7816 C6 78516 C8 7816 C_10 7816 12 7816 C_13 7816 C_14 7816 C_15 7816 C_16 Description This tests check the error response to the mutual authenticate com This tests check the response For the mutual authenticate command This tests check the response For the mutual authenticate command This tests checks the Secure Messaging coding of Read Binary B0 This tests checks the
37. e scripts contained in this folder enable to produce all the certificates needed to perform the EAC conformity tests according to the ADVANCED SECURITY MECHANISMS FOR MACHINE READABLE TRAVEL DOCUMENTS EXTENDED ACCESS CONTROL EAC TESTS FOR SECURITY IMPLEMENTATION v 1 11 specification There are two ways to generate certificates depending on the information that you have about the passport It is necessary to know at least the CVCA root private key and the information 2009 HJP Consulting GmbH Borchen 33 All rights reserved Using test scripts stored in the according CVCA certificate i e CVCA public key signature algorithm CAR and validity dates to run the complete conformity test suite Before running of the generating test suite testsuite_Gen_ALL_Certificate_Sets xml please make sure the appropriate options are set in the GlobaltTester Preferences See the section called Changing Preferences for Certificates 26 for details All generated keys and the certificates will be stored in the certificates directory selected in the preferences The public keys encoded according to the ASN 1 type SubjectPublicKeyInfo defined in the X 509 standard will be stored as binary files and the corresponding private keys will be stored as pkcs8 files with the same name The key names and the names of certificates are chosen accordingly to tte ADVANCED SECURITY MECHANISMS FOR MACHINE READABLE TRAVEL DOCUMENTS EXTENDED ACCESS C
38. ecifications e com hjp globaltester prove epp security sm comprises all classes to establish and process secure messaging for BAC and EAC e passports e com hjp globaltester prove epp security eac contains additional helper classes specific to EAC e passports 2009 HJP Consulting GmbH Borchen 54 All rights reserved Support Chapter 7 Support GT TestManager is released as Open Source software and general information about the product can be found at www globaltester org http www globaltester org HJP Consulting provides value added services for GlobalTester community members who have purchased a corresponding subscription By using your login name and password you will have access to detailed information at www globaltester org http www globaltester org Refer to your GlobalTester Service contract for additional support levels and how to access them GT Prove ePP and GT Prove IS HJP Consulting provides registered users of GlobalTester Prove EPP and GlobalTester Prove IS with an internet based customer support area at http www hjp consulting com support In our customer support area you will have access to a variety of technical support services for our test products GlobalTester Prove EPP and GlobalTester Prove IS We will provide you with the latest software updates and releases of the conformity test scripts in the respective download area You can also find documentation and related test specifications in the
39. en 39 All rights reserved Using test scripts HJP CONSULTING GlobalTester TestRunner BSI TR 03105 Part 3 1 Test plan For application protocol and logical data structure Version 1 1 1 14 11 2008 Test session Test suite Test case Failures ID Profile BAC ID 7816_4_1 Warnings Release Version 2 0 3 Short Description Release Date 20090406 Quality mandatory Author Holger Funke Profile ICAO Company HIP Consulting GmbH References Short Description Tests of Basic Access Control Status FAILURE Failures 0 Warnings 0 Description Description Tests of Basic Access Control Selecting the LDS Application using the AID positive test Locale Testing Mode 1 1 1 2 What to do if a test fails If there are errors in the execution of a test suite the test cases can be viewed Select the tab Problems in the results section of the user interface All test cases that failed are shown By double clicking on an entry the corresponding error information is shown in the upper part of the display By double clicking on a problem that you wish to analyse in the Problems view the corresponding details for the test case will be shown in the results section of the user interface Note In the Problems view only those test cases that failed are shown GlobalTester GT Scripts EPP BAC BSI Loggi
40. en e passports and readers is of paramount importance Issuing authorities and passport manufacturers must rely on solutions which conform to the international standards for e passports ICAO published test specifications for BAC passports while the German BSI and the French AFNOR published test specifications for EAC passports Together these tests have become the test standards for worldwide e passport conformity testing The GT Prove ePP allows organisations to test e passports for conformity with the latest conformity testing standards With GT Prove ePP users can prove the conformance of electronic passports according to ICAO RF Protocol and Application Test Standard for e Passports part 3 and AFNOR BSI EAC test specifications GT Prove ePP test software incorporates an ISO 14443 reader simulator device an EAC passport API software and a scriptbased test suite The EAC passport API together with a test reader device simulates an inspection system and provides all cryptographic functions to read any e passport The test scripts can be executed in an automatic batch process or individually The GT Prove IS enables users to prove the conformance of e passport inspection systems with the international standards for electronic passports Incorporating the world s first real time EAC passport simulator the GT Prove IS provides users with a high performance reliable and extensible test tool for e passport inspection systems worldwide With GT Pr
41. executed in 532 millis 2009 01 12 14 52 44 828 INFO Failures in current test case 2 2009 01 12 14 52 44 828 INFO Warnings in current test case 12 2009 01 12 14 52 45 078 INFO 2009 01 12 14 52 45 078 INFO Starting new test case 2009 01 12 14 52 45 076 INFO Testcase ID 7616 C 4 2009 01 12 14 52 45 076 INFO Testcase Short Description Bac 2009 01 12 14 52 45 078 INFO Testcase Description This tests check the error response to the m 2009 01 12 14 52 45 078 INFO Testcase Quality mandatory 2009 01 12 14 52 45 078 INFO Testcase Profile Bac 2009 01 12 14 52 45 078 INFO Running global preconditions 2009 01 12 14 52 45 109 INFO Running preconditions 2009 01 12 14 52 45 203 INFO Reseting chip 2009 01 12 14 52 45 312 INFO TS 3B Direct logic TO 64 K 4 byte historical characters TDi 60 T T 0 protocol type TD2 O1 T T 1 protocol type status bytes 009000 lt nT If an error has occurred it is suggested that you select the Problems tab in the results area This allows you to quickly localise the test cases that failed In addition to the overview of the test cases that failed you will automatically see the relevant information in the main user interface area fod testsuite_B amp c xml fod 7816_4_01 xml B gt_20090112145225 log 23 m 2009 01 12 14 52 44 828 INFO Received status word 90 m 2009 01 12 14 52 44 828 INFO Test failure The actual and expected retur
42. g a test case You will need a GlobalTester Project containing several test cases Allthough it is possible to create a test suite without allready having test cases created it does not make much sense Note Test suites only refrence test cases and can not contain test logic itself Create a new test suite the same way as a new test case New Other in TestManager but then select the New Test Suite wizard and finish the wizard as before 2009 HJP Consulting GmbH Borchen 52 All rights reserved Develop GlobalTester test scripts HJP CONSULTING Select a wizard Creates a new GlobalTester test case Wizards type filter text amp Class Ti Interface a Java Project Java Project from Existing Ant Buildfile E i General Author cys GlobalTester il New GlobalTester Project Cancel Now you should see the new test suite as XML file in the TestExplorer and it will be opened in the editor Again a complete template is generated that you just need to fill in and add the test case names to the generated template XML file 2009 HJP Consulting GmbH Borchen 53 All rights reserved Developers References Chapter 6 Developers References EAC Passport Java API The EAC Passport API provides functions to establish and process a secure communication with e passports These e passport may support BAC or EAC The interfaces of the EAC Passport API classes are defined in the following JavaDoc sp
43. henticate Fill up signature with 00 if smaller than 128 160 192 256 or 384 bytes e New preference to generate test reports automatically when test run is finished e Updated library Bouncycastle 1 40 for Java 1 5 e Use settings for e passports as separate preference page e User can resume or skip test case when card communication failure occurs e Read buffer of command READ BINARY can be configured by user 0 255 Bytes default 223 Bytes 2009 HJP Consulting GmbH Borchen 57 All rights reserved What s new e For CSCA certificates without DS certificate included path to DS certificate can be defined in preferences e Two alternatives to use JavaScript function readFileEOF offered in preferences e Various test reports e XML Test Report in XML structure including XSL file to view report in browser e PDF Test Report in Adobe PDF format e CSV List with comma separated values of each test case result e Allow user interaction in scripts e openQuestion e openWarning e openError e openInformation e openConfirm e openDialog What s new in version 1 4 2 e MRZ Dialog Button to clear all entries of MRZ e Minor bugfix What s new in version 1 4 1 e Bugfix ASN 1 allows now structures with empty OID What s new in version 1 4 e GlobalTester allows now to create test reports in PDF additional to the previous XML format What s new in version 1 3 2 e Bugfix in Security Environment Ensure that every test case use its own Security
44. hive into a location in your local filesystem and select this location as update site during the installation process as described in the section called Installing GlobalTester Plug ins 7 When updates to your purchased products become available new update site images will be provided which you can unpack in the same location in your filesystem and overwrite old files Then again you can perform the update as if your update site was an online one Checking that GlobalTester was successfully installed After restarting Eclipse you can confirm that your selected GlobalTester products are successfully installed Firstly you will see the HJP Logo in the main menu Fie Edit Source Refactor Wavigate Search Project Run Window Help im OCLI MLL Additionally you can view the list of plug ins which are installed Select Help About Eclipse SDK Ti Help r ty ice Welcome 7 Help Contents TP Search Dynamic Help Key Assist ErI ShiFE L Tips and Tricks Cheat Sheets Software Updates About Eclipse SOK Then select Plug in Details 2009 HJP Consulting GmbH Borchen 11 All rights reserved HJP CONSULTING About Eclipse SDK Eclipse SDE Version 3 4 1 Build id M20080911 1700 Getting Started fc Copyright Eclipse contributors and others 2000 2008 All rights reserved Visit http www eclipse org platform This product includes software developed by the
45. ic key and the appropriate private key together with some additional information Note The following assumptions must hold e The signature algorithm is known e The current date of the passport is known e The CAR stored in EF CVCA is known Select the generation method key pair 2009 HJP Consulting GmbH Borchen 28 All rights reserved User Interface of GlobalTester HJP CONSULTING Preferences type Filter text Certificates General H Ant Author PA Certificates GlobalTester CSCA Certificate C Dokumente und Einstellungen amay workspaces runtime gt2 Fresh GT Scripts IS EAC BSlitestsuites Data CFG CERTS PA CERTSPA DFLT cacert der _ Browse CLT One lt 3 ePassport DS Certificate C Dokumente und Einstellungen amay workspaces runtime gt2 fresh GT Scripts 15 EAC BSTitestsuites Data CFG CERTS PA CERTSPA DFLTi dscert der generate EAC Certificates Failure InterFace Use generated certificate set Logging Simulator Certificates directory C Dokumente und Einstellungen amay workspaces runtime gt2 Fresh Certificates TestManager Base data to use G3 Help O Root certificate and root key Install Update GlobalTester Settings for ePassport certificates 4 Java Key pair E Plug in Development Root Certificates Key Pair H Run Debug H Team public key C Dokumente und Einstellungen amay workspacestruntime at2 Fresh GT Scripts 15 EAC BSTitestsuites
46. ication error Pesc10CardTerminal PESC Exception in method SCardTransmit error occurred with SCardTransmit return code 80100069 The smart card has been removed so that Further communication is not possible T nesune_ f _stptest_ fart seston Understanding the outcome of a test run When executing tests a simple visual indication is given to show the status of the tests The dialog shows an error counter and a warning counter on the left side The background of these will be green as long as no errors warnings occur GlobalTester TestRunner BSI TR 03105 Part 3 1 Test plan For application protocol and logical data structure Version 1 1 1 14 11 2008 Test session Test suite Test case Failures ID Profile BAC ID 7816_B_19 Warnings Release Version 2 0 3 Short Description Security Conditions Release Date 20090406 Quality mandatory Author Holger Funke Profile BAC Company HIP Consulting GmbH References Short Description Tests of Basic Access Control Status PASSED Failures 0 Warnings oO Description Description Tests of Basic Access Control Accessing the EF COM file with implicit File selection ReadBinary with SFI Locale Testing Mode If an error occurs the background of the error counter changes to red If a warning occurs the background of the warning counter changes to yellow 2009 HJP Consulting GmbH Borch
47. ieved by using the left mouse button Standard Windows features such as Ctrl left mouse click can be used to select multiple entries Selected tests can easily be started from the Test Explorer using the HJP Logo in the toolbar or the Run test entry from the context menu In the following screenshot the TestExplorer view is shown 2009 HJP Consulting GmbH Borchen 21 All rights reserved HJP CONSULTING Test Explorer 23 E GT Scripts EPP BAC BST c i TestSuites Sl Loy Laver Sl Loy TestSuites be 7816_4_01 xmil bel 7816_4_02 xml fo testsuite 4 Header xmil E i TestSuiteB Loy TestSuitec HE TestSuiteD E l TestSuiteE Lay TestSuiteF Loy TestSuites mo UL Ei The Result View User Interface of GlobalTester d The Result view is populated after tests have been executed and it gives you a visual impression of the status of your test IT Result view 53 E console EN Problems TestSuite TestlaselD Description els Time s Status Profile Bac Profile BAC Profile BAC Profile Bac Profile BAC Profile Bac Profile BAC Profile BAC Profile BAC Profile BAC 7ele_c 4 7816 C5 7816 C6 7616 C8 7816 C_10 7816 12 7816 C_13 7816 C_14 7616 C_15 7816 C_16 This tests check the error response to the mutual authenticate com This tests check the response For the mutual authenticate command This tests check the response For the mutual authenticate command This tests checks the Secur
48. ilt in one click POF export D Em We a A B x fa OpenOffice org Impress Mati A few brief dialogs confirm the last steps of the installation process and a concluding message appears with the confirmation Java TM SE Development Kit 6 Update 12 Successfully Installed ie Java TM SE Development Kit 6 Update 12 Complete Java TM SE Development Kit 6 Update 12 Successfully Installed Product Registration is FREE and includes many benefits Notification of new versions patches and updates Special offers on Sun products services and training Access to early releases and documentation tee When vou click Finish product and system data will be a a collected and the JOK product registration Form will be presented IF you do not register none of this information will be saved Java For more information on what data Registration collects and how it is managed and used see the Product Registration Information Page Sun Javare o Finish 2009 HJP Consulting GmbH Borchen 6 All rights reserved Getting Started Installing Eclipse GlobalTester framework consists of different Eclipse plug ins and requires the Eclipse IDE for Java Developers Version 3 3 or higher Eclipse can be downloaded from http www eclipse org downloads To install Eclipse all you need to do is unpack the zip file downloaded in the desired directory No further work is required other than making s
49. im problem view e Failures and Warnings in problem view are now only available for current session and not more persistent until log file is deleted e Test report and result view show time needed to execute test cases e Test report and log file name active card reader e Better and clearly arranged log file e TRACE Logging of script commands e DEBUG Logging of application information e INFO Logging of test specific data this level is recommended What s new in version 1 0 4 e Bugfix Release What s new in version 1 0 3 e User can set level of logging in preferences e Bugfix Postconditions are now executed correctly also when several test cases are selected e More comfortable handling chip card is not needed on reader before mrz is aked What s new in version 1 0 2 e Bugfix Potential error while calculating checksum of test suite eliminated What s new in version 1 0 1 e Bugfix Card Reader is not allocated during whole Eclipse session e Updated library Bouncycastle 1 35 2009 HJP Consulting GmbH Borchen 60 All rights reserved What s new What s new in version 1 0 e Current versions of all used libs e SmartCard Shell SCSH3 3 4 227 e Rhino Engine JS 1 6R4 e Bouncycastle 1 33 e log4y 1 2 14 e Help integrated in Eclipse e MRZ Dialog with history e Clearly arranged test report e Test reports are not only available for test suites but also for test cases e Fixed all kind of bugs What s new in GT Prove ePP What s new
50. in version 2 2 0 e Simplified certificate handling and certificate generation e Using of customizable default MRZ with disabled MRZ dialog e Minor bugfixes What s new in version 2 1 1 e Minor bugfixes What s new in version 2 1 0 e Added classes for certificate generation e Updated library Bouncycastle 1 43 e Minor bugfixes What s new in version 2 0 3 e Added new tag checksum_corrupt to manipulate secure messaging by increasing checksum by 1 What s new in version 2 0 2 e Better manipulation of MAC e Minor bugfixes What s new in version 2 0 1 e Test certificates for EAC are now generated by scripts What s new in version 2 0 0 e Initial version of GT Prove ePP 2009 HJP Consulting GmbH Borchen 61 All rights reserved
51. in your workspace Install scripts manually To install test scripts manually you will need to download the appropriate ZIP file first and store it in a location you can remember When you started Eclipse with an empty workspace and switched to GlobalTester perspective either select File Import or right click in the TestExplorer and select Import The following dialog will appear 2009 HJP Consulting GmbH Borchen 13 All rights reserved Getting Started Select Create new projects From an archive File or directory Select an import source type filter text Existing Projects into Workspace C Preferences iS CS E i Plug in Development E i Bun Debug HLS Team Select General Existing Projects into Workspace and click the Next button Choose Select archive file and browse to the archive you downloaded before 2009 HJP Consulting GmbH Borchen 14 All rights reserved Getting Started Import Import Projects Select directory to search for existing Eclipse projects Ce Select archive file CiiDokurmente und Einstellungen amsi Eigene Projects GT Scripts EPP Basics GT Scripts EPP Basics Then select the projects to import and click Finish When the projects are imported successfully you will see a new project in TestExplorer 2009 HJP Consulting GmbH Borchen 15 All rights reserved Getting Started CT Test Explorer 2 5 0 GT Scripts EPP Basics Helper Rea
52. ion means the length of the data group is known in before the data group itself is beeing read Therefor the datagroup can be read in bigger chunks Without using the header information the data groups can only be read byte by byte which will take much longer Changing Preferences for Certificates On the ePassport preferences page you can configure parameters for connections to e passports 2009 HJP Consulting GmbH Borchen 26 All rights reserved User Interface of GlobalTester HJP CONSULTING Preferences type filter text Certificates a is GlobalTester Settings For ePassport certificates Author PA Certificates GlobalTester CSCA Certificate C Dokumente und Einstellungen amay workspaces runtime gt2 Fresh GT Scripts IS EAC BST testsuites Data CFG CERTS PA CERTSPA DFLTicacert der Browse CLT One E E x ePassport Certificates DS Certificate C Dokumente und Einstellungen amayiworkspaces runtime gt2 fresh GT Scripts IS EAC BSI testsuites Data CFG CERTS PA CERTSPA DFLT dscert der Browse generate EAC Certificates Failure Interface C lUse generated certificate set Logging e Simulator TestManager Help Install Update 4 Java E Plug in Development f Root Certificates Key Pair Run Debug Team static EAC Certificates DV Certificate 15 Certificate 15 Key Restore Defaults Apply In the upper part you can select which certificates to use for
53. ipts 33 to see which geneartion scripts are available and how to invoke them Note Certificates are not generated automatically After changes to these options or the referenced files you need to regenerate the certificates in order to perform valid tests This reduces the overhead of certificate generation before every singel test run To generate certificates and or use generated certificates enable the checkbox labeled Use generated certificates Now the options for certificate generation become available 2009 HJP Consulting GmbH Borchen 27 All rights reserved User Interface of GlobalTester HJP CONSULTING Preferences type Filter text E General fH Ant Author GlobalTester CLT One ePassport Certificates Failure Interface Logging Simulator TestManager 6 Help Install Update H Java Plug in Development Run Debug E Team Certificates GlobalTester Settings for ePassport certificates PA Certificates CSCA Certificate C Dokumente und Einstellungen amay workspaces runtime gt2 Fresh GT Scripts IS EAC BSI testsuites Data CFG CERTS PA CERTSPA DFLT cacert der DS Certificate C Dokumente und Einstellungen amayiworkspaces runtime gt2 fresh GT Scripts IS EAC BSI testsuites Data CFG CERTS PA CERTSPA DFLT dscert der generate EAC Certificates Use generated certificate set Certificates directory C Dokumente und Einstellungen amay workspacestruntime at2 fresh Certificate
54. lay at this time To begin testing your product you will need test scripts that define the tests that should be performed There are two options to obtain these scripts The easiest way is to buy them from a vendor e g HJP Consulting that offers scripts for standard conformity tests or develops them specifically to your needs For instructions how to install import such scripts see the section called Installing GlobalTester test scripts 13 The other option is to develop them by yourself For instructions on this see Chapter 5 Develop GlobalTester test scripts 46 About test scripts Test procedures are described together with their expected results in so called test scripts for GlobalTester This section will give you an overview on terminology and concepts used in test scripts in GlobalTester as well as the scripts provided by HJP Consulting for testing e passports GlobalTester distuingishes two types of files containing test scripts test cases and test suites A test case defines the procedures to execute one particular test and to evaluate it Also it defines the expected results so that a decision whether the test was correct or not can be made Test suites on the other hand combine multiple test cases to one execution chain These tests are then executed and evaluated one after the other A test suite only references the test cases that should be executed and does not contain them Many test specification as the BSI ePassport
55. lease contact info hjp consulting com inquire the term and conditions for commercial usage of the code We also provide support and consulting services in case you need something not yet found in the product 1 accept the terms of the license agreements O I do not accept the terms of the license agreements EE DEN ME EEE After installing GlobalTester Plug ins Eclipse must be restarted Select Yes when you see the following screen Software Updates It is strongly recommended you restart Eclipse SDK For the changes to take effect For some add ons it maw be possible to apply the changes you have made without restarting Would you like to restart now Yes Apply Changes 2009 HJP Consulting GmbH Borchen 10 All rights reserved Getting Started Installing GlobalTester Plug ins offline If you are not able to use the automatic installation procedure e g because you do not have an internet connection available on your machine you can install the plug ins manually In this case the automatic update process will not work as no online update site is available For offline installation of GT Prove EPP you can download a ZIP file containing a copy of the update site from http www hjp consulting com support This ZIP file includes all files that are present on the update site together with the needed meta files to create a local update site To install plug ins form the ZIP file simply unpack the whole arc
56. ncodes do not match FailureID25 Unexpected status word received 744 Running postconditions 2009 01 12 14 52 44 828 INFO Test case executed in 532 millis 2009 01 12 14 52 44 828 INFO Failures in current test case 2 2009 01 12 14 52 44 828 INFO Warnings in current test case 12 2009 01 12 14 52 45 078 INFO 2009 01 12 14 52 45 078 INFO Starting new test case 2009 01 12 14 52 45 078 INFO Testcase ID 7816 C 4 2009 01 12 14 52 45 076 INFO Testcase Short Description Bac 2009 01 12 14 52 45 078 INFO Testcase Description This tests check the error response to the mutual autl 2009 01 12 14 52 45 076 INFO Testcase Quality mandatory 2009 01 12 14 52 45 078 INFO Testcase Profile Bac 2009 01 12 14 52 45 078 INFO Running global preconditions 2009 01 12 14 52 45 109 INFO Running preconditions 2009 01 12 14 52 45 203 INFO Reseting chip TTT nooo ono a OO00 2009 01 12 14 52 45 312 INFO TS 3B Direct logic TO 84 K 4 byte historical characters TDi 50 T T 0 protocol type TDZ O1 T T 1 protocol type lt Status bytes 009000 lt v Selecting a test case in the problem area automatically updates the main user interface area Additionally visual markings in the main area T you navigate quickly to the erroneous test cases 2009 0 1 628 INFO 2009 01 12 Analysing errors If an error occurs detailed information is displayed In order to
57. ng et_20090112145225 log Eclipse SDK File Edit Navigate Search Project Run Window Help im Mie Qi go ami BS ot GlobalTester fay CVS Reposito amp Java IT Test Explorer 3 A fed testsuite_BAC xml Le 7816_A_01 xml E gt_20090112145225 log 22 E amp we 2009 01 12 52 44 828 INFO Received status word 30 2009 01 12 52 44 828 INFO Test failure The actual and expected returncodes do not match l y TestSuitea y TestSuiteB LC TestSuitec y TestSuiteD LC TestSuiteE Gy TestSuiteF Ey TestSuiteG fe testsuite_BAC xml k testsuite_complete_standard_layer6 xml fe testsuite_ICAO xml FR testsuite_Oddins xml f testsuite _Plain xml 4 y Layer 2009 01 12 3 FailureID25 Unexpected status word received 2009 01 12 H 44 828 INFO Running postconditions 2009 01 12 44 828 INFO Test case executed in 532 millis 2009 01 12 H 44 828 INFO Failures in current test case 2 2009 01 12 H 44 828 INFO Warnings in current test case 2009 01 12 52 45 078 INFO 2009 01 12 H 45 078 INFO Starting new test case 2009 01 12 52 45 078 INFO Testcase ID 7616 C 4 2009 01 12 H 45 078 INFO Testcase Short Description BAC 2009 01 12 H 45 078 INFO Testcase Description This tests check the error response to the mutual autl 2009 01 12 45 078 INFO Testcase Quality mandatory B Readme txt 2009 01 12 H 745 078 INFO Testcase Profile Bac ER GT Scripts EPP BAC ICAO 2009 01 12 52 45 078 INFO Running global preconditions l
58. nging general GlobalTester Preferences c cece cceccec ese eceeeceeeeeeeeeeeneeees 23 Changing GlobalTester TestManager Preferences ccceceeceseeceeeeceeeeneneees 24 Changing Logging Preferentes nccicencccerincsinwiocencidenedauswsnvandedonndseesiiwenvavenediueeds 25 Changine CPassport Premerenices nn ni sean torse 25 Changing Preferences for Certificates cccccececcec ences eeeee ees eeeeseneeaeeeeeeneeeees 26 A USINE L SL SCIIS ne ed nement eme scsi ose cie iii 30 ADO AE SSI DES E E 30 Global Tester Seri pig EPP 31 MGC SEEN Ol ES CAS ice 34 SCIGCONS and CXCCUUO TESIS Le ner de ses bemec sde rose sect ni ee eee iqun ons 34 Starting stoping and skipping tests 0 0 cece ees cece ence eee e eect eee e esses ee eneeaenseeeeaeneeas 37 Understanding the outcome of a test TU nee dense sene readers 39 What to do if a test ANS ne nee rame tes dass entres dnot encre dede eee 40 Understanding 168 Mes ns a a hiheaenes coin chiot ioutie nent 41 A AVS LE CDDP ee EEEE 42 Wile Wa SSSR a 43 SC DO ea a a a e e 44 5 Develop Global Tester test SCI PIS sc csu dcccexsnicimenvedeiniaes EEE E EOE EEEE 46 Pea eS CI OE oeeie E E ERA A E EERE 46 Creant e SUES aeei E E T D dd a ie ss 32 0Developers RSR a EE ed ne nt 54 EAC Passport Java APL es nn a nn tas eco han chi tin tiers 54 D DD eis a oceans no nemo sp een oe ewes 55 Gl Prove CPP amd Gl Proved rh das 55 o ADOUL HIP CORSA een es be eterna 56 O W Dals DO EE EEE 5
59. o generate borderline coordinates for ephemeral keys What s new in version 1 2 3 e Popup error message if installed java version is too old e Log file Suffix changed to log instead of txt What s new in version 1 2 2 e Updated library Bouncycastle 1 37 for Java 1 5 e Test cases to be executed could not only be selected in TestExplorer but also in editor What s new in version 1 2 1 e Small conformity methods for Extended Access Control EAC What s new in version 1 2 e Support of Extended Access Control EAC Chip Authentication with new session keys What s new in version 1 1 2 e Bugfix Release Added missing JSCMSSignedData js to config js 2009 HJP Consulting GmbH Borchen 59 All rights reserved What s new What s new in version 1 1 1 e New version of Smart Card Shell 3 5 280 e New requirements Java 1 5 instead of Java 1 4 before Updated library Bouncycastle 1 36 for Java 1 5 e New style sheet for test report to allow comments with carriage return e Corrected DTD structure of test report What s new in version 1 1 e Use wizards to create templates of test sessions and test cases e Use wizard to create new GlobalTester project e GT includes a simple test case sample which is available with FilelNewlOther e Log file is marked with failures even if test run is stoped by user e Problem view includes expected and received value if available e Special Marker for failures and warnings allows to filter them
60. oftware and click button Add Site 2009 HJP Consulting GmbH Borchen J All rights reserved Getting Started Software Updates and Add ons Installed Software Available Software 7 type filter text Mame version G Ganymede a The Eclipse Projeck Updates Show only the latest versions of available software Include items that have already been installed Open the Automatic Updates preference page to set up an automatic update schedule You will then be prompted to select the location which should be searched for new software The URL entered must be https www hyp consulting com globaltester gtproveepp update After making these entries click OK Add Site Location hjp consulting com globaltesterfgtproveepp update Orchive Cancel Note This is a secure site with a URL prefix HTTPS Due to a bug concerning Eclipse together with Java 6 versions 1 6 0_7 to 1 6 0_13 update sites using HTTPS may not work in some situations In this case you should upgrade to JDK version 1 6 0_14 or use the installation via local update site as described in the section called Installing GlobalTester Plug ins offline 11 Now you see your new update site available and you can select which features to load from the side In the screenshot below you see an Eclipse installation with different update sites of which some may not be accessible for you To install GT Prove ePP select GlobalTester P
61. on called Installing GlobalTester test scripts 13 In the TestExplorer you will see the scripts as follows 2009 HJP Consulting GmbH Borchen All rights reserved 31 Using test scripts CT Test Explorer 2 3 lt 0O 1 g GT Scripts EPP BAC BSI Loy Specification Lay TestSuites B ReadMe txt c GT Scripts EPP BAC ICAO Loy Specification Loy TestSuites El ReadMe txt E i GT Scripts EPP Basics Loy Helper 5 ReadMe txt c i GT Scripts EPP EAC BSI Loy Specification Loy TestSuites B ReadMe txt Here you see four new projects in your TestExplorer The third project in this view GT Scripts EPP Basics contains some basic helper scripts that are used by all the other scripts normally you won t need to get into contact with this project it simply needs to be present in your workspace The other three projects define tests according to different specifications As their structure is quite identical the following will show you the project GT Scripts EPP BAC BSI a bit further as an example The project GT Scripts EPP BAC BSI has the same folder layout as the other two projects Each contains a folder Specification and a folder TestSuites 2009 HJP Consulting GmbH Borchen 32 All rights reserved Using test scripts Test Explorer CI d c i GT Scripts EPP BAC BSI E l Specification To TR 03105_Part3 1_V1 1 1 pdf Loy TestSuites tl Loy Layer ley Laver d TestSuite LR TestSuite
62. ove IS users can now prove the conformance of inspection systems according to TR 03105 part 5 This test tool incorporates an ISO 14443 card simulator device EAC passport simulator software and a script based test suite The EAC passport simulator works as a unique golden reference The test scripts can be executed in an automatic batch process or individually The scripting language provides full transparency to the test engineer and is flexible to be able to add user specific test cases quickly System Requirements Software The GlobalTester framework generally requires the following software environment 2009 HJP Consulting GmbH Borchen 1 All rights reserved Before you begin e Windows XP Windows 2000 or Windows Vista e Java Development Kit 1 6 or higher e Eclipse 3 3 or higher GlobalTester Plug ins e a viewer for PDF files to show reports It is recommended that you install the latest version of Eclipse currently Version 3 4 and the latest versions of the GlobalTester Plug ins At least the GT TestManager Plug in is required to use GlobalTester This depends on the GT Logging and GT OnlineHelp Plug ins When you use the GlobalTester Update Site for installation as described in the section called Installing GlobalTester Plug ins 7 you don t have to care about this Eclipse will handle that for you If you want to test e passports you will need the GT Prove ePP Plug in This depends on GT TestManager and e
63. rove EPP from the Update Site mentioned above Now press the Install button 2009 HJP Consulting GmbH Borchen 8 All rights reserved Getting Started HJP CONSULTING Software Updates and Add ons ee Software Available Software type filter text F Marne Version E i GlobalTester Update Site Properties E fie 000 Uncategorized Lip GlobalTester TestManager E GlobalTester Update Site EPP E 000 Uncategorized L GlobalTester Prove EPP CJK GT Scripts EPP m l GlobalTester Update Site 15 E m 000 Uncategorized OE GlobalTester Prove EPP te GlobalTester Prove 15 1 E GT Scripts 15 EAC BSI E G Ganymede Update Site HET 44 The Eclipse Project Updates Add Site Manage Sites Show only the latest versions of available software Include items that have already been installed Open the Automatic Updates preference page to set up an automatic update schedule Before the installation begins you will see the following screen Eclipse does the dependency resolution and checks whether all requirements are fullfilled Progress Information Calculating requirements and dependencies This may lead to some packages are selected to be installed additionally The calculated list will be shown and you need to click Next to accept this 2009 HJP Consulting GmbH Borchen All rights reserved Getting Started HJP CONSULTING install Install Review and confirm th
64. s Base data to use Root certificate and root key O Key pair Root Corticates key Pair CVCA root certificate C Dokumente und Einstellungen amay workspaces runtime gt2 Fresh GT Scripts IS EAC BSI testsuites Data CFG CERTS TA CFG DFLT EAC CYCA_Cert_O1 cycert Browse Browse Browse Browse CYCA root key C Dokumente und Einstellungen amay workspaces runtime gt2 Fresh GT Scripts IS EAC BSI testsuites Data CFG CERTS TA CFG DFLT EAC CVCA_Key_01 pkcs8 Browse C Add the domain parameters in C CA link certificates static EAC Certificates Restore Defaults Apply Select a directory where the certificates and keys should be stored and depending on the information you have a method for certificate generation If you have the ready CVCA Root Certificate select the method Root certificate and root key Now you must enter the location of zour CVCA root certificate e g C cvcaROOT cvcert and the CVCA root private key e g C privateKeyROOT pkcs8 in the according field Thats everything needed now you can generate the certificates and use them lateron Note The following assumptions on the root certificate must hold e CVCA certificate is conform to TR3110 e The effective date is the current date of the passport e The CHR of the certificate is the one stored in the EF CVCA If you have no valid CVCA root certificate you can generate all the needed certificates from a root pub
65. se you need to While your tests are running the the run test dialog shows you the status of the current test Here you can stop the test execution by clicking Stop button This will abort the tests and you can generate a report or start a new test run GlobalTester TestRunner BSI TR 03105 Part 3 1 Test plan for application protocol and logical data structure Version 1 1 1 14 11 2008 Test session Test suite Test case Failures OI ID Profile BAC ID 7816_B 4 Warnings ele Release Yersion 2 0 3 Short Description Security Conditions Release Date 20090406 Quality mandatory Author Holger Funke Profile BAC Company HIP Consulting GmbH References Short Description Tests of Basic Access Control Status PASSED Failures 0 Warnings 0 Description Description Tests of Basic Access Control Accessing the DG2 file with explicit File selection Locale Testing Mode 1 1 In some cases the communication with the card may be interrupted or disturbed This will lead to the following message box Here you can resume with the current test case which will be executed again skip it and resume with the next test case or abort the complete test session 2009 HJP Consulting GmbH Borchen 38 All rights reserved Using test scripts HJP CONSULTING Card communication error Card commun
66. sulting GmbH Borchen 40 All rights reserved Using test scripts HJP CONSULTING At the far right of the window the location of errors are shown with a red marker fog testsuite_BAC xml Lo 7816_4_01 xml B gt_20090112145225 l0og 22 2009 01 12 14 52 44 828 INFO Received status word 90 Am 2009 01 12 14 52 44 828 INFO Test failure The actual and expected returncodes do not match FailureID25 Unexpected status word received Running postconditions Test case executed in 532 millis 2009 01 12 14 52 44 828 INFO 2009 01 12 14 52 44 828 INFO 2009 01 12 14 52 44 828 INFO 2009 01 12 14 52 44 828 INFO 2009 01 12 14 52 45 076 INFO 2009 01 12 14 52 45 078 INFO 2009 01 12 14 52 45 078 INFO 2009 01 12 14 52 45 078 INFO 2009 01 12 14 52 45 076 INFO 2009 01 12 14 52 45 076 INFO 2009 01 12 14 52 45 078 INFO 2009 01 12 14 52 45 075 INFO 2009 01 12 14 52 45 109 INFO Running preconditions 2009 01 12 14 52 45 203 INFO Reseting chip 2009 01 12 14 52 45 312 INFO TS 3B Direct logic TO 64 K 4 byte historical characters TDi 80 T T 0 protocol type TDZ O1 T T 1 protocol type Status bytes 009000 M lt gt Failures in current test case 2 Warnings in current test case 12 Starting 5 oOo co Testcase mn i Testcase Short Description BAC Testcase Description This tests check the error response to the mutual aut Testcase Quality mandatory Testcase Profile BAC Running global precon
67. t 7 2009 01 12 745 109 INFO Running preconditions 2009 01 12 745 203 INFO Reseting chip o Outline 23 E Properties 2009 01 12 52 45 312 INFO TS 3B Direct logic 4n outline is not available TO 84 K 4 byte historical characters TDi 60 T T 0 protocol type TDZ O1 T T 1 protocol type Status bytes 009000 lt I EE EE EH i TTT ono D OO O Oooo IT Result view fai Problems 22 E console 106 errors 66 warnings 0 others Filter matched 166 of 172 items Description Resource Path Location Type Unexpected response received Expected value 61 received value gt_20090112145225 log GT Scripts EPP BAC BSl Logging line 1595 GlobalTester Failure Unexpected response received Expected value 61 received value gt_20090112145225 log GT Scripts EPP BAC BSl Logging line 1945 GlobalTester Failure Unexpected response received Expected value 75 received value gt_20090112145225 log GT Scripts EPP BAC BSI Logging line 1642 GlobalTester Failure Unexpected response received Expected value 75 received value gt_20090112145225 log GT Scripts EPP BAC BSl Logging line 1986 GlobalTester Failure Unexpected re d Expected value 77 received value H line 1548 GlobalTester Failure Unexpected 5 received Expected value 62 A gt_20090112145225 log 9 Unexpected status word received Expected value 62 63 67 68 69 64 6E at 20090112145225 loq i Errors 100 of 106 items 2009 HJP Con
68. ted are being installed Please wait while the Install Wizard installs Javal TM SE Development Kik 6 Update 12 This may take several minutes Status Extracting Installer During the installation of the JDK the Java Runtime Environment JRE will be installed You will be informed about the location that the JRE will be installed to Again you can change this to your needs but we recommend to keep the default settings unless you are an advanced user who wants more precise control over the components that will be installed ize Java Setup Destination Folder Destination Folder Click Change to install Java to different Folder Install to Programme Javaljredi Cancel Again a progress box is shown This one tracks the progress of the JRE installation 2009 HJP Consulting GmbH Borchen 5 All rights reserved Getting Started HJP CONSULTING ie Java Setup Progress Installing Java This may take a Few minutes Status Extracting Installer Now you can have a full featured office suite that s compatible with Microsoft Office for free Powerful integrated set of word processing spreadsheet presentation drawing and database applications Reads edits and saves Microsoft Office files Supports over 70 languages and Solaris Windows Linux and Mac operating systems Uses industry standard open file format OpenDocument as its default file format Bu
69. testsuite dtd gt lt eml stylesheet type text xsl href testsuite xsl 7 gt HE Logging LS Reports fed SampleTestCase xml fog SimpleTestlase xml Eng SimpleTestSuite xml T lt testsuite gt lt testsuiteid gt lt testsuiteid gt lt yersion gt lt versionz lt date gt lt date gt lt author gt lt author gt lt company gt lt company gt lt shortdescription gt lt shortdescription gt lt description gt lt descriptionz lt specificationname gt lt specificationnamez lt specificationversion gt lt specificationversionz lt globalpreconditions gt lt qglobalpreconditions gt 3 lt testcases gt lt testcase gt SampleTestCase xml lt testcase gt CES a i DE Outline 3 B Properties E lt testcase gt SimpleTestCase xuml lt testcase gt SS ee ee lt testcase gt lt testcase gt al Es E E e T lt testeages gt E testsuite lt f testsuite gt bestsuiteid version Reports GlobalTester provides detailed reports which document the tests executed To generate a report click on the Generate Reports button after completion of the test session Stop Generate Report cose When generating a report you will be asked to select the file name under which the report should be saved The path for the reports corresponds to the workspace which you selected when installing Eclipse and the test scripts me eee C2 SimpleT est
70. the passive authentication simply type in the path to the certificate in the textbox or click the Browse button and choose the certificate file in the appearing dialog CSCA Certificate The user may set a der file that will contain the CSCA certificate for the following e passport conformity tests The CSCA certificate will be used to verify an DS certificate optionally contained in the SOD file of the e passport DS Certificate The user may set a der file that will contain an external DS certificate for the following e passport confomity tests The DS certificate will be used if the SOD to be checked does not contain a corresponding DS certificate When testing e passports secured with EAC further certificates are needed If you want to only prove your e passport according to BAC test specifications only the DV and IS Certificates and the according IS Certificates private key are needed to perform the EAC connection to read all datagroups You can uncheck the checkbox labeled Use generated certificates and enter the paths to those files in the lowest part of the preference page This will be sufficient to perform tests with EAC passports but not to test the proper implementation of the EAC funtionality To test the EAC functionaltity of an e passport several different certificate sets are needed These can be automatically generated by the test suites delivered along with the EAC test scripts See the section called Usage of Generation Scr
71. thor GlobalTester CLT One ePassport Failure Interface Logging Simulator Help Install Update Java Plug in Development Run Debug Team it TestManager GlobalTester preferences page Run properties Property file i Card reader Manual setting of card terminal Reports _ Generate reports automatically Manual setting of directories and files IDs used in CSY report Platform ID used in CSY report E Sample ID fused in CSY report 12345 Restore Defaults Apply In the topmost area you can configure a property file for the JavaScript interpreter Here you can define additional methods and variables to be used within own test cases In the middle you can select which card terminal will be used during the tests or if it should be automatically determined The lower half of the preference page report generation can be configured You can select whether reports should be automatically generated or only on user request Below you can enter a target 2009 HJP Consulting GmbH Borchen All rights reserved 24 User Interface of GlobalTester HJP CONSULTING directory in which the report files will be stored if you leave this option unchecked the Reports subfolder of the testscript project will be used In the included group IDs used in CSV report the Ds of platform and sample can be configured These values will be used within the reports
72. uite xsl gt Ey TestSuiteA y TestSuiteB ey TestSuiteC Ey TestSuiteD H E TestSuiteE ey TestSuiteF H E TestSuiteG fed testsuite _BAC xml f testsuite_complete_standa Tests of Basic Access Control FA testsuite_ICAO xml fed testsuite_OddIns xml norte le ar lt description gt FA testsuite_Plain xml a 5 n Tests of Basic Access Control lt gt lt description gt lt specificationname gt BSI TR 03105 Part 3 1 Test plan for application protocol and logical data structu a E amp T ka lt specificationname gt testsuite a nia testsuiteid Profile BAC Text Grid Author version 2 0 3 date 20090406 JT Result view 83 E console 2 Problems author Holger Funke company HJP Consulting GmbH shortdescription Tests of Basic Access description Tests of Basic Access Cont specificationname BSI TR 03105 Part Profile BAC 7816_C 6 This tests check the response for the mutual authenticate command 0 875 Profile BAC 7816_C 8 This tests checks the Secure Messaging coding of a Read Binary BO 1 156 lt testsuite gt lt testsuiteid gt Profile Bac lt testsuiteid gt lt version gt 2 0 3 lt version gt lt date gt 20090406 lt date gt lt author gt Holger Funke lt author gt lt company gt HJP Consulting GmbH lt company gt lt shortdescription gt o o amp Outline 2s LJ Properties m TestSuite TestCaselD Description Times
73. ulting has formed a long term partnership with COMPRION http www comprion com COMPRION invents manufactures and sells devices for the testing of smart cards smart card interfaces and terminals for both the contactbased and contactless world Together HJP Consulting and COMPRION are able to provide a state of the art product portfolio for testing e passport and e passport inspection systems Visit us in the internet on http www hjp consulting com 2009 HJP Consulting GmbH Borchen 56 All rights reserved What s new Chapter 9 What s new What s new in GT TestManager What s new in version 2 2 0 e Minor bugfixes What s new in version 2 1 1 e Minor bugfixes What s new in version 2 1 0 e Variables according to preferences of GT Prove ePP and GT Prove IS are made available whithin script execution environment e Updated library Bouncycastle 1 43 e Minor bugfixes What s new in version 2 0 0 e New structure of plugins for GlobalTester tools e Functionalities for e passports and inspection systems are moved to dedicated plugins e Minor bugfixes What s new in version 1 5 1 e New version of OCF Socket Terminal socketterminal jar e New checksum for EAC test scripts version 1 12 includes new test case e Shorter name for log file e Minor bugfixes What s new in version 1 5 0 e Chip Authentication RSA Fill up ephemeral key and shared secret with 00 if smaller than 128 160 192 256 or 384 bytes e External Aut
74. ur needs select Window from the Eclipse main menu then click on Preferences New Window New Editor gt Open Perspective b Sho view k Customize Perspective Th Save Perspective S E Reset Perspective Close Perspective Close All Perspectives Navigation Now a dialog will open where you can change preferences of Eclipse and many of its plug ins Changing general GlobalTester Preferences In the preferences dialog select GlobalTester on the left Now you will see general GlobalTester options on the right hand side 2009 HJP Consulting GmbH Borchen 23 All rights reserved HJP CONSULTING Preferences type filter text General E Ant Author CLT One ePassport Failure Interface Logging Simulator TestManager Help Install Update Java Plug in Development Run Debug Team GlobalTester GlobalTester preferences page SmartCardShell configuration C Manual select configuration File For SCSH User Interface of GlobalTester Restore Defaults Apply Here you can configure whether to use a special configuration file for the SmartCardShell or not If so you must give the location of your configuration file Changing GlobalTester TestManager Preferences When you select TestManager on the left you will see the available TestManager options on the right hand side Preferences type Filter text General Ant Au
75. ure you have a Java Runtime Environment installed When you unzip the file it creates a directory called eclipse with multiple subdirectories below that For example you could unpack the zip file in the root directory e g C and Eclipse would be installed in C eclipse Important The location where Eclipse is installed must be writeable for all users who will run GlobalTester So it is recommended not to install it under C Program files as this location gets virtualized in Windows Vista Note Installing Eclipse does not change the Windows registry Please use a third party unzip program to unpack the Eclipse zip file such as Winzip FileZip or EasyZip Installing GlobalTester Plug ins The preferred way of installing GlobalTester Plug ins is to use the online update site This is very convenient as it automatically does the dependency resolution and enables the possibilty for automatic updates Nevertheless you can install the plug ins manually see the section called Installing GlobalTester Plug ins offline 11 to find detailed instructions GlobalTester Plug ins are installed by using the standard Eclipse Software Update mechanism From the Eclipse main menu select Help Software Updates CD Help le Welcome 7 Help Contents re Search Dynamic Help Key Assist Erl ShiFE L Tips and Tricks Cheat Sheets Software Updates j About Eclipse SDK In the dialog select tab Available S
76. use the main menu File New Project Then you will see the New Project dialog as below New Project Select a wizard Creates a new GlobalTester project Wizards type filter text g Java Project Java Project from Existing Ant Buildfile E Plug in Project General Author gt CVS El pled New GlobalTester Project Es Tay Plug in Development Here select the New GlobalTester Project wizard and click Next In the following screen select a name for the project to be created This project may contain different test cases optionally grouped in test suites 2009 HJP Consulting GmbH Borchen 46 All rights reserved Develop GlobalTester test scripts New Project Project Create new project resource Project nam q SimpleTestProject Use default location Working sets _ Add project to working sets After selecting a name click Finish Now you can see the new project in the TestExplorer 2009 HJP Consulting GmbH Borchen 47 All rights reserved Develop GlobalTester test scripts Now right click on the project and select New Other 2009 HJP Consulting GmbH Borchen 48 All rights reserved ipleTestProiect 0 Into Open in Mew Window Copy Faste 3 Delete Move Rename 9 Import gy Export 2 Refresh Close Project Close Unrelated Projects Run 4s Debug 45 Profile As Team wl Compare with Restore From Local History
77. xtends it with the needed functionality to perform layer 6 and layer 7 tests of ICAO conform e passports To test inspection systems for e passports you will need the GT Prove IS Plug in This depends on GT TestManager and extends it with functionalities to access an e passport Simulator Using the simulator both valid and invalid communications can be tested with the inspection system and GlobalTester will generate detailed logfiles and reports Both GT Prove ePP and GT Prove IS depend on some common HJP Consulting offers packages for each of the above use cases that contain all the needed plug ins Hardware The GlobalTester framework supports standard PC SC card readers The following card readers have been tested for their compatibility with GlobalTester e ACG Dual 2 1 ISO 14443 A B ACG http www acg id com e Integrated Engineering ISO14443 4 e Document Reader Integrated Engineering http www ieprox s6 webgenerator nl e Omnikey CardMan 5321 RFID Omnikey http www omnikey com e Feig OBID classic pro eDocument Reader Feig Electronic http www feig de 2009 HJP Consulting GmbH Borchen 2 All rights reserved Getting Started Chapter 2 Getting Started In order to be able to run GlobalTester on your machine you must install the following components in the following order e Java Development Kit e Eclipse e GlobalTester Plug ins e GlobalTester test scripts specific to your scenario If you already have an
78. y of these elements on your machine you can skip the appropriate step Please however ensure that any software components that are installed satisfy the minimum version requirements see the section called Software 1 Installing Java GlobalTester framework requires the installation of the Java Development Kit JDK version 1 6 0 or later The JDK can be downloaded for example from http java sun com javase downloads index jsp or from alternative download sites Double click on the saved file icon to start the installation process Note In the following the installation of JDK 1 6 0_12 is shown The dialogs may vary slightly with different versions The installer unpacks the files needed for the installation which should take less than a minute After unpacking the installation files the installer presents the license agreement You may choose to Accept the license agreement and continue the installation process 2009 HJP Consulting GmbH Borchen 3 All rights reserved Getting Started i Java TM SE Development Kit 6 Update 12 License License Agreement Please read the Following license agreement carefully Hun Microsystems Inc Binary Code License igreement for the Java SE DEVELOPMENT EIT JDE VERSION 6 SUM MICROSYSTEMS INC SUN IS WILLING TO LICENSE THE SOFTWARE IDENTIFIED BELOW TO YOU ONLY UPON THE CONDITION THAT YOU ACCEPT ALL OF THE TERNS CONTAINED IN THIS BINARY CODE LICENSE AGREEMENT AND SU

User manual GT Prove ePP

Contents

Download Pdf Manuals

Related Search

Related Contents