Thanks for the suggestion of adding it to the anon-clear ACE. I will consider 
that.  I will also look into adding it to the introspection since it currently 
is also causing introspection failures.

I think you are right only a few people are interested in the resource at this 
point.  The only reason it came to my attention was that I am trying to 
introduce sample code that passes the CTT. The CTT sees the new resource and 
starts complaining. Not surprising CTT can only test what it knows about and 
this was added for the next version of OCF/IoTivity.

George Nash.

From: Heldt-Sheller, Nathan
Sent: Wednesday, March 28, 2018 9:09 PM
To: Nash, George <george.n...@intel.com>; iotivity-dev 
<iotivity-dev@lists.iotivity.org>
Subject: RE: Asking for information about the new oic.r.sp resource

Thanks George, yes, this is the "Security Profiles" Resource, the CR for which 
was approved just last Thursday in Prague.

The Resource is used by Onboarding Tools (OBTs) to determine the robustness 
level to which a device conforms, and isn't important to non-OBT authors 
(except as you noted insofar as it interferes with CTT testing).  I'd also 
suggest adding a R-only ACE for "anon-clear" for this Resource just to future 
proof your app, but that can also wait if you prefer.

The schema is still a work in progress and is being driven by Ned Smith (CR 
author) with help from Mitch Kettrick and a few others... I'm not sure what the 
ETA is for it to be pushed to the schema github repo.

Thanks,
Nathan

From: 
iotivity-dev-boun...@lists.iotivity.org<mailto:iotivity-dev-boun...@lists.iotivity.org>
 [mailto:iotivity-dev-boun...@lists.iotivity.org] On Behalf Of Nash, George
Sent: Wednesday, March 28, 2018 3:46 PM
To: iotivity-dev 
<iotivity-dev@lists.iotivity.org<mailto:iotivity-dev@lists.iotivity.org>>
Subject: [dev] Asking for information about the new oic.r.sp resource

I just pulled down the latest code from master branch and ran it against the 
CTT tool.

To my surprise we have a new resource `oic.r.sp`. The resource exists on path 
`/oic/sec/sp`. Since this is under sec I assume it has something to do with 
security. I know nothing about this new resource and was wondering if any other 
developers can point me in the right direction to find out more information.

At this point the CTT cannot find the schema for oic.r.sp which means it has 
not been checked into the repositories that the CTT tool uses for finding 
resources. This must be a resource for the 1.4 "Bangkok" release.

Looking through the log it was added with this commit.



SHA-1: faba61555c2bb2bde8db2859bb46c3643fec43e0

* Security Profile Resource Implementation

Change-Id: I6aab60b562272f0c4f34233d89c2b8884677c42a
Signed-off-by: Steven Saunders 
<s.saunders-contrac...@cablelabs.com<mailto:s.saunders-contrac...@cablelabs.com>>

I know what code was added but I don't see a reference to a jira ticket or a CR 
so I am left wondering where to find information about the `security profile 
resource`.

Can anyone point me to the documentation?

Should I post this question to the security wg?

Thanks

George Nash
_______________________________________________
iotivity-dev mailing list
iotivity-dev@lists.iotivity.org
https://lists.iotivity.org/mailman/listinfo/iotivity-dev

Reply via email to