CST 3.3.2 Key type selection bug

msti — Mon, 26 Jun 2023 13:56:22 GMT

I am investigating the newest version of the code signing tool (CST 3.3.2) and tried the hab4_pki_tree script on Windows. I wanted to follow the example from the HAB Code Signing Tool User Guide and noticed two 'bugs':
1. The description when selecting the key type (RSA, RSA-PSS, ECC) does not match to the user guide for the newest version
2. When selecting 'rsa' as key type, you reach the key length dialog for ECC. (See line 204 in the hab4_pki_tree.bat script)

Can you please double check on your side that this is the only bug in the CST?

EDIT: There seems to be at least one further bug. The steps
':BEFORE_GEN_KEYS
:: Check existance of keys/, crts/ and ca/ directories of <cst> before generating keys and
:: switch current working directory to <cst>/keys directory, if needed.' (see line 274)
do not work...
To me, it seems like the new CST version was only tested on Linux. Please test it on Windows and fix any bugs you encounter

PS: I am not sure if this is the best way to report a bug, please let me know if there is a better way.

Re: CST 3.3.2 Key type selection bug

hector_delgado — Tue, 27 Jun 2023 19:57:59 GMT

Hi @msti ,

I hope you're doing great! I'll review this with our team and get back to you as soon as possible.

Thank you.

Best regards,
Hector.

Re: CST 3.3.2 Key type selection bug

hector_delgado — Fri, 07 Jul 2023 19:15:36 GMT

Hi @msti ,

I hope you're doing great! We've confirmed this to be a bug and we're currently working on a fix. Expect an update to the tool soon.

Thank you.

Best regards,
Hector.

topic Re: CST 3.3.2 Key type selection bug in i.MX Processors

CST 3.3.2 Key type selection bug

Re: CST 3.3.2 Key type selection bug

Re: CST 3.3.2 Key type selection bug