Dangerous Things
782074f6ae
Three components, all bench-validated to varying depths: - applet/: CSA Aliro v1.0 Java Card applet for J3R180. AUTH0 + AUTH1 expedited-standard flow end-to-end green via PC/SC bench reader (aliro-bench-test). Userland AES-256-GCM and HMAC-SHA-256 layered on top of J3R180's primitives because the card lacks both natively. P-256 curve params seeded explicitly per J3R180's quirk. - harness/: Python orchestrator (aliro-trustgen, aliro-personalize, aliro-bench-test) for trust-bundle generation, card personalization via PersonalizationApplet, and PC/SC AUTH0+AUTH1 transactions. 126 pytest cases passing. - reader/STM32CubeExpansion_ALIRO_V1_0_0/: ST X-CUBE-ALIRO V1.0.0 with our NFC10A1 port (NUCLEO-U545RE-Q + X-NUCLEO-NFC10A1, ST25R200 shared with NFC09A1). nfc10-only/ project, NFC10A1 BSP shim, ALIRO_TRUST_OVERRIDE include into vendor's provisioning.c, and an ALIRO_APDU_TRACE wrapper around demoTransceiveBlocking. Boots, detects the J3R180, completes SELECT + AUTH0; AUTH1 currently fails with RFAL ERR_PROTO (0xB) — under investigation, see docs/plans/2026-04-20-nucleo-nfc10a1-port.md and bench-notes/. Excluded: x-cube-aliro.zip vendor archive, harness/.venv, build dirs, generated aliro_trust.h (contains private reader scalar), all PEMs. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
29 lines
1.1 KiB
Bash
Executable File
29 lines
1.1 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Run Maven inside the DangerousThings smartcard-ci Docker image.
|
|
#
|
|
# The image (vivokey/smartcard-ci) ships a pre-built jcardsim-3.0.5-SNAPSHOT,
|
|
# Oracle JavaCard SDKs, Java 8, and Maven. On first run we seed a named
|
|
# Docker volume with the image's baseline .m2 so subsequent runs keep
|
|
# downloaded deps (JUnit etc.) warm between invocations.
|
|
#
|
|
# Usage: ./scripts/dt-mvn.sh <mvn args> e.g.: ./scripts/dt-mvn.sh -q test
|
|
set -euo pipefail
|
|
|
|
IMAGE="vivokey/smartcard-ci:latest"
|
|
VOLUME="aliro-smartcard-m2"
|
|
|
|
project_root="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/.." &> /dev/null && pwd)"
|
|
|
|
if ! docker volume inspect "$VOLUME" >/dev/null 2>&1; then
|
|
echo "Seeding $VOLUME with baseline .m2 from $IMAGE (one-time)" >&2
|
|
docker volume create "$VOLUME" >/dev/null
|
|
docker run --rm -v "$VOLUME:/dst" --entrypoint sh "$IMAGE" \
|
|
-c 'cp -a /root/.m2/. /dst/ && chmod -R a+rwX /dst'
|
|
fi
|
|
|
|
exec docker run --rm -t \
|
|
-v "$project_root:/work" -w /work \
|
|
-v "$VOLUME:/root/.m2" \
|
|
-e JC_CLASSIC_HOME=/app/sdks/jc305u3_kit \
|
|
"$IMAGE" "mvn $*"
|