import certificate failed

By hxiii , 20 November, 2024
Forums
DLMSDirector

Hi，
When director import certificate to meter with GBT, it seems that the bit which indicates ‘last block’ not be set. Please help check it.Thanks!
log：
14:38:46
7E A0 4C 02 21 81 FE 2B 2A E6 E6 00 E0 01 00 01 00 00 38 DF 00 08 43 54 54 30 30 30 30 30 08 56 61 6E 67 6F 33 32 31 00 00 82 01 B5 CB 82 01 B1 31 00 00 00 06 24 CF 0B 22 1C 3B 33 CF 9C 0A 7C 4C E0 75 A8 FF E6 17 5D 33 CD F3 6D DB 7E
14:38:46
7E A0 14 81 02 21 1E 64 A9 E6 E7 00 E0 81 00 16 00 16 00 30 81 7E
14:38:46
7E A0 8D 02 21 81 10 68 64 E6 E6 00 E0 01 00 02 00 01 79 F9 C9 D4 6A 98 E5 D1 3B 86 29 EF 53 8C AE ED 99 6A AC E3 27 18 C0 73 C6 D3 4E C9 8F 63 2B 20 DB 0E 01 6F 60 1E 8E AF 2E 42 A7 56 1A B7 D2 7A 87 39 98 7E 69 50 9D 87 C9 21 29 E4 93 FA 23 CA C5 71 3F 45 95 87 21 AC 74 66 08 A3 5C 6E 0A 1B D4 6C 8A 80 3A EB A9 CF 2A 5A 44 63 00 6E B9 3C E9 D7 05 1E 74 59 4E 85 0C 85 01 DF C9 CA 4A 7F 87 3C 1D 1A 01 10 57 59 EE A9 5D 08 7E
14:38:47
7E A0 14 81 02 21 30 18 61 E6 E7 00 E0 81 00 17 00 17 00 53 84 7E
14:38:47
7E A0 8D 02 21 81 32 78 66 E6 E6 00 E0 01 00 03 00 03 79 F5 CC 15 F6 69 28 6A AB 79 93 CA 2B 1F 36 40 37 22 00 4F D0 2D 67 22 CA 51 02 43 21 C8 A0 9A AD 71 C7 AE 77 9D BD 2D 84 49 48 E7 31 AE 8D 88 D2 6E 0F 3B EC A4 94 5F 0D 57 4F 88 69 8F C9 81 51 5F 07 41 C3 EF 46 C0 A3 ED AD 4F CB 89 EB 12 84 FB 71 08 4A 34 9B 91 63 41 7E 8D 9F C2 2F A8 CC DE A7 D2 B8 42 DE 8C 56 76 D0 CD 7A F7 CF 95 A9 2E D0 08 07 DE 3A CA 9D 63 B9 E6 7E
14:38:47
7E A0 14 81 02 21 52 0C 21 E6 E7 00 E0 81 00 18 00 18 00 62 B5 7E
14:38:47
7E A0 8D 02 21 81 54 48 60 E6 E6 00 E0 01 00 04 00 05 79 B4 C5 42 DF 9E DA 52 16 B6 FC 76 F2 16 88 99 33 9B 20 24 56 B8 EE 01 97 38 54 5F 8B E2 2F 8B 48 59 65 AA FC D7 E3 2C 45 5B C2 CA 4D 6D 19 3F 44 D7 7E 33 82 1B 0D F2 3E 90 F8 93 2B 38 E9 DD 80 89 3C AB 7A 16 78 02 51 63 99 24 95 C3 D2 52 9B 72 35 6A D0 1C 18 7C 44 89 4E B9 0F 89 22 92 F6 1F 1E 68 31 F2 15 11 8B B2 AA FC DB F7 6C A3 04 58 D4 14 20 FC 90 F1 11 DD 82 79 7E
14:38:47
7E A0 14 81 02 21 74 38 65 E6 E7 00 E0 81 00 19 00 19 00 01 B0 7E
14:38:47
7E A0 80 02 21 81 76 2C 1E E6 E6 00 E0 01 00 05 00 07 6C 63 6D 48 6D CA 80 BC 23 93 5F 26 67 CE 70 68 F5 01 66 44 89 39 0D E6 2C 00 76 68 F0 CF 34 1E D2 2D FC 8D 66 3F 07 23 4F 64 02 D1 40 99 47 D8 71 BA AE FA 9A 91 45 BF 62 C6 58 A9 42 03 A9 7C F9 1A 4A 4F DF 89 30 52 89 FA D6 AE 5B BC FE 9D 5E 4A C3 BB 93 A9 74 F9 52 A2 0A 49 37 42 8B 94 6D 1E CE C0 8D B8 FA E4 4A 76 1A 0B 99 EC DD 7E
14:38:47
7E A0 14 81 02 21 96 24 A1 E6 E7 00 E0 81 00 1A 00 1A 00 A4 BF 7E

Kurumi

1 year 6 months ago

Hi,

The last block is set to True for the last packet. Can you share the block cipher key so I can check this from the bytes?

BR,
Mikko

hxiii

1 year 6 months ago

The block cipher key is 1111111111111111. And the authentication key is 2222222222222222. Thanks for your help!

Kurumi

1 year 6 months ago

Hi,

Your certificate is not complete. There should be 498 bytes, but there are only 433 bytes. Have you tried updating your certificate with GXDLMSDirector or just selected this group? Have you made any changes to GXDLMSDirector?

BR,
Mikko

hxiii

1 year 5 months ago

Hi,
I tried to import P-256 certificate using director and was successful. But failed with P-384 certificate. Abnormal phenomenon remains the same as before. The version of director is 9.0.241231. The certificates generated by director. Please help to check it. Thanks!

hxiii

1 year 5 months ago

Hi,
I choose another sap which support suite2. However, it still failed like before.

GUEK: 11111111111111111111111111111111
GAK:22222222222222222222222222222222

Logs as below:
13:38:26
TX: 7E A0 AB 02 21 C1 54 27 7D E6 E6 00 E0 01 00 01 00 00 81 96 DF 00 08 43 54 54 30 30 30 30 31 08 56 61 6E 67 6F 33 32 31 00 00 82 01 F2 CB 82 01 EE 32 00 00 00 02 D7 D4 C3 6E DB 30 84 35 45 08 E7 D8 FE CC 5E 70 56 A9 D8 E1 F8 0A 1D 35 E6 F6 55 2F 87 D0 21 2E CB 1B F3 C9 40 A9 89 95 61 32 5A 85 1B F3 FC F4 26 95 DB 93 8D B8 54 17 9A FE A7 7E 3C 51 19 74 2C 28 0D 72 E0 A4 FE D1 77 7A 07 4E DC B3 A0 DD D0 CB 12 6C E8 64 6C B3 93 CB 0F A8 52 10 15 44 28 80 7B 9F 57 4E F3 45 30 96 31 3E 05 FB 18 E2 A0 00 55 FB F1 95 7E
13:38:27
RX: 7E A0 14 C1 02 21 74 8F 73 E6 E7 00 E0 81 00 01 00 01 00 29 CD 7E
13:38:27
TX: 7E A1 0E 02 21 C1 76 8C B7 E6 E6 00 E0 01 00 02 00 01 81 F9 17 BE 0A 74 12 5E 97 FD 3D 6D 2E E4 4E 61 87 22 3C 50 DE 77 9C 4C 53 3F CA 90 BC 75 E8 42 CA 64 50 BB 94 B9 99 61 0C 23 15 62 FD 97 24 96 75 1B 71 72 8F FC 80 59 CA FA DA F4 B5 7A EA 1C 78 CA 46 4B 4A 86 35 E6 F8 86 1A BF ED 6E C8 90 82 F3 6D E0 45 BB 2C 49 EB 39 B2 03 3C CB 34 C9 6F AF 84 25 A8 81 B3 29 AB A2 29 D3 D2 15 3F 6C 72 3B 10 AF 9D 83 1A B9 4B 6C 13 C0 FD 4D 99 75 29 0C DF F0 6D 8F 27 8D 75 A1 87 4E 27 82 4E 5C C7 72 9B 6B 7C 62 4E A7 B1 10 3F 39 7B 01 23 86 C2 57 44 A3 9A C5 73 95 7B AF 13 74 DD E4 F5 BC F7 81 54 B9 E5 8B C3 32 98 66 8B 8E 8F 05 51 9B BF D3 DA 7D 6F 52 3A 42 38 83 61 C8 2C C3 EE CD EA 6E E8 ED A3 E3 06 F6 CD 23 68 61 C8 CE DD F7 A2 F1 59 03 66 68 EE C9 51 05 7A C6 D3 BA B4 D5 B9 EF D5 8F 51 C1 6B C2 9B F8 5C 66 42 7E
13:38:27
RX: 7E A0 14 C1 02 21 96 93 B7 E6 E7 00 E0 81 00 02 00 02 00 8C C2 7E
13:38:27
TX: 7E A0 F2 02 21 C1 98 41 55 E6 E6 00 E0 01 00 03 00 03 81 DD A4 BC 4C 4C 38 D7 AE 95 3A 05 F4 74 9A 60 57 1D A3 FE 5F 7A A9 62 A3 6F 77 7F 32 64 19 8C F3 80 90 57 CC C2 62 A1 FD E2 22 89 05 08 76 5C 64 E1 E8 20 7E A8 0F 5F C3 EA 52 9D D8 EF 4E 8F 67 A9 56 7E E1 99 A4 42 CE 96 0A C2 BA 3E A9 39 C5 EE F7 A7 49 2B DB EC 06 D1 04 54 D9 90 CA A5 36 84 61 DF A9 33 DC 00 D6 B8 2A C9 82 8C A1 B9 78 A8 E2 3B 0C 0D DE 5D 75 FC 76 0E 41 E6 60 12 73 66 58 EB 28 63 FD C3 A7 EE 01 2F D5 FE CD A2 FA 23 96 DD 60 BA 04 F2 79 EF FF 5A FB 5E A7 53 9C 54 9A 4F 12 CE 40 1B 56 AD D0 48 EB B2 68 9E 85 24 63 EE DD 5E 79 F2 27 27 23 47 96 BA CA 00 4B 33 21 18 94 15 2E E6 7F 97 2A 5A F7 AC D6 E3 C7 63 B1 FB 16 FC 99 80 90 3A 19 EE E5 83 59 84 BA 7E
13:38:28
RX: 7E A0 14 C1 02 21 B8 EF 7F E6 E7 00 E0 81 00 03 00 03 00 EF C7 7E

hxiii

1 year 5 months ago

Hi,
Client system title is “CTT00001”, and server system title is “Vango321”. Thanks!

Kurumi

1 year 5 months ago

Hi,

You are sending your data with general signing and not with GMAC. You are using Security Suite 2. Because I don't have your public key, I can't decrypt the sent data and validate it.

Have you updated P-384 private key and certificate to the meter?

BR,
Mikko

hxiii

1 year 5 months ago

Hi,
The data was sent by director using both of general-signing and GMAC. You can find the sh of “32 00 00 00 02” follows “additional field”. The only use of the public-private key pairs is for signing.

The meter has P-384 private key and certificate. I just want to import another one to meter.

In addition, I can use this configuration for communication, such as writing and reading.

Kurumi

1 year 5 months ago

Hi,

I can't decrypt the data with the GUEK you shared. This means that your data is encrypted with different key.

BR,
Mikko

hxiii

1 year 5 months ago

Hi,
Because the director uses GBT to send data, you need to concatenate the data sent three times. I have confirmed with the DLMS translator that the data can be decrypted.

Kurumi

1 year 5 months ago

Hi,

My bad. I was using security suite 1 instead of 2.

At first glance, the data looks correct, and the general signing tag is there.

You have generated the certificate with GXDLMSDirector so I can check this.

BR,
Mikko