Skip to content

Incorrect interface name GetAssignedMediaSigningCertificates #730

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
bsriramprasad wants to merge 7 commits into from
Closed

Incorrect interface name GetAssignedMediaSigningCertificates #730

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
df78a77
Incorrect interface name
bsriramprasad Feb 26, 2026
a43629e
clarify the user and factory provisioned key details
bsriramprasad Feb 26, 2026
cf861b5
fixed text formatting tags, renders bold in spec for both param and text
bsriramprasad Feb 26, 2026
50d0229
fix typo
bsriramprasad Feb 26, 2026
9a8e5ae
Made a duplicate interface, kept the existing one as ius, just marked…
bsriramprasad Feb 26, 2026
a841612
removed a redundant bullet format
bsriramprasad Feb 26, 2026
059a897
Merge branch 'development' into video/fix-media-signing-interface-name
bsriramprasad Mar 11, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
86 changes: 70 additions & 16 deletions doc/Security.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4379,12 +4379,28 @@
<title>Media Signing</title>
<section xml:id="section_cfb_gy4_kwb">
<title>Overview</title>
<para>Signing of media that is generated by the device is described in the [Media Signing
Specification]. Media is signed using a private key that is provisioned during factory
production that is stored in a specially protected hardware component (e.g., a trusted
platform module). This private key is associated with a certificate that holds the public
key. In addition to the factory provisioned key one additional private key can be used to
sign media. </para>
<para>Media authenticity data in the form of signatures is generated by the device and
included in the media stream as described in the [Media Signing Specification]. Media is
typically signed using a certificate based on the private key provisioned in one of the
below listed approaches</para>
<variablelist>
<varlistentry>
<term>Factory Provisioned Key</term>
<listitem>
<para>Private key provisioned into the device, during factory production, stored in
a specially protected hardware component (e.g., a trusted platform module). This
private key is associated with a certificate that holds the public key.</para>
</listitem>
</varlistentry>
<varlistentry>
<term>User Provisioned Key</term>
<listitem>
<para>User can provision an additional private key and that private key is
associated with a certificate that holds the public key. </para>
</listitem>
</varlistentry>
</variablelist>

</section>
<section xml:id="section_dfb_gy4_kwb">
<title>AddMediaSigningCertificateAssignment</title>
Expand All @@ -4402,8 +4418,8 @@
<varlistentry>
<term>request</term>
<listitem>
<para role="param">CertificationPathID - [tas:CertificationPathID] The ID of the
certification path to assign for media signing.</para>
<para role="param">CertificationPathID - [tas:CertificationPathID]</para>
<para role="text">The ID of the certification path to assign for media signing.</para>
</listitem>
</varlistentry>
<varlistentry>
Expand All @@ -4415,11 +4431,12 @@
<varlistentry>
<term>faults</term>
<listitem>
<para role="param">env:Sender - ter:InvalidArgVal - ter:CertificationPathID No
<para role="param">env:Sender - ter:InvalidArgVal - ter:CertificationPathID </para>
<para role="text">No
certification path is stored in the keystore under the given certification path
ID.</para>
<para role="param">env:Sender - ter:InvalidArgVal - ter:NoPrivateKey The key pair that
is associated with the leaf certificate in the certificate chain does not have an
<para role="param">env:Sender - ter:InvalidArgVal - ter:NoPrivateKey </para>
<para role="text"> The key pair that is associated with the leaf certificate in the certificate chain does not have an
associated private key.</para>
</listitem>
</varlistentry>
Expand All @@ -4444,8 +4461,8 @@
<varlistentry>
<term>request</term>
<listitem>
<para role="param">CertificationPathID - [tas:CertificationPathID] The ID of the
certification path to remove.</para>
<para role="param">CertificationPathID - [tas:CertificationPathID]</para>
<para>The ID of the certification path to remove.</para>
</listitem>
</varlistentry>
<varlistentry>
Expand Down Expand Up @@ -4474,6 +4491,43 @@
</section>
<section xml:id="section_ffb_gy4_kwb">
<title>GetAssignedMediaSigningCertificates</title>
<para>This operation returns the IDs of the certification paths that are assigned for media
signing on the device. This operation will always return the factory provisioned
certification path and can additionally return a certification path that has been added by
AddMediaSigningCertificateAssignment.</para>
<para>This interface is deprecated due to the introduction of GetAssignedMediaSigningCertificationPaths.</para>
<variablelist role="op">
<varlistentry>
<term>request</term>
<listitem>
<para role="text">This message is empty.</para>
</listitem>
</varlistentry>
<varlistentry>
<term>response</term>
<listitem>
<para role="param">CertificationPathID - optional, max 2 [tas:CertificationPathID] </para>
<para role="text">List of certification path IDs assigned for media signing. At least
one certification path that includes the factory provisioned one shall be returned.
At most two certification paths will be returned.</para>
</listitem>
</varlistentry>
<varlistentry>
<term>faults</term>
<listitem>
<para role="text">None</para>
</listitem>
</varlistentry>
<varlistentry>
<term>access class</term>
<listitem>
<para role="access">READ_SYSTEM_SECRET</para>
</listitem>
</varlistentry>
</variablelist>
</section>
<section xml:id="u3w_brs_k3c">
<title>GetAssignedMediaSigningCertificationPaths</title>
<para>This operation returns the IDs of the certification paths that are assigned for media
signing on the device. This operation will always return the factory provisioned
certification path and can additionally return a certification path that has been added by
Expand All @@ -4492,8 +4546,8 @@
<listitem>
<para role="param">CertificationPathID - optional, max 2 [tas:CertificationPathID] </para>
<para role="text">List of certification path IDs assigned for media signing. At least
one certification path will be returned, the factory provisioned one. At most two
certification paths will be returned.</para>
one certification path that includes the factory provisioned one shall be returned.
At most two certification paths will be returned.</para>
</listitem>
</varlistentry>
<varlistentry>
Expand Down Expand Up @@ -5541,7 +5595,7 @@
<para>MediaSigningSupported</para>
</entry>
<entry>
<para>If true, GetAssignedMediaSigningCertificates shall be supported.</para>
<para>If true, GetAssignedMediaSigningCertificationPaths shall be supported.</para>
</entry>
</row>
<row>
Expand Down
44 changes: 42 additions & 2 deletions wsdl/ver10/advancedsecurity/wsdl/advancedsecurity.wsdl
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2463,6 +2463,23 @@
</xs:complexType>
</xs:element>
<!--===============================-->
<xs:element name="GetAssignedMediaSigningCertificationPaths">
<xs:complexType>
<xs:sequence/>
</xs:complexType>
</xs:element>
<xs:element name="GetAssignedMediaSigningCertificationPathsResponse">
<xs:complexType>
<xs:sequence>
<xs:element name="CertificationPathID" type="tas:CertificationPathID" minOccurs="0" maxOccurs="2">
<xs:annotation>
<xs:documentation>The IDs of all certification paths that are assigned for media signing.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
</xs:element>
<!--===============================-->
<xs:element name="GetAssignedMediaSigningCertificates">
<xs:complexType>
<xs:sequence/>
Expand Down Expand Up @@ -2881,7 +2898,13 @@
<wsdl:message name="RemoveMediaSigningCertificateAssignmentResponse">
<wsdl:part name="parameters" element="tas:RemoveMediaSigningCertificateAssignmentResponse"/>
</wsdl:message>
<wsdl:message name="GetAssignedMediaSigningCertificatesRequest">
<wsdl:message name="GetAssignedMediaSigningCertificationPathsRequest">
<wsdl:part name="parameters" element="tas:GetAssignedMediaSigningCertificationPaths"/>
</wsdl:message>
<wsdl:message name="GetAssignedMediaSigningCertificationPathsResponse">
<wsdl:part name="parameters" element="tas:GetAssignedMediaSigningCertificationPathsResponse"/>
</wsdl:message>
<wsdl:message name="GetAssignedMediaSigningCertificatesRequest">
<wsdl:part name="parameters" element="tas:GetAssignedMediaSigningCertificates"/>
</wsdl:message>
<wsdl:message name="GetAssignedMediaSigningCertificatesResponse">
Expand Down Expand Up @@ -3563,6 +3586,14 @@
<wsdl:input message="tas:RemoveMediaSigningCertificateAssignmentRequest"/>
<wsdl:output message="tas:RemoveMediaSigningCertificateAssignmentResponse"/>
</wsdl:operation>
<wsdl:operation name="GetAssignedMediaSigningCertificationPaths">
<wsdl:documentation>
This operation returns the IDs of the certification paths that are assigned for media signing on the device. This operation will always return the factory provisioned certification path and can additionally return a certification path that has been added by AddMediaSigningCertificateAssignment.<br/>
A device shall support this command if the MediaSigningSupported capability is true.
</wsdl:documentation>
<wsdl:input message="tas:GetAssignedMediaSigningCertificationPathsRequest"/>
<wsdl:output message="tas:GetAssignedMediaSigningCertificationPathsResponse"/>
</wsdl:operation>
<wsdl:operation name="GetAssignedMediaSigningCertificates">
<wsdl:documentation>
This operation returns the IDs of the certification paths that are assigned for media signing on the device. This operation will always return the factory provisioned certification path and can additionally return a certification path that has been added by AddMediaSigningCertificateAssignment.<br/>
Expand Down Expand Up @@ -4186,7 +4217,16 @@
<soap:body use="literal"/>
</wsdl:output>
</wsdl:operation>
<wsdl:operation name="GetAssignedMediaSigningCertificates">
<wsdl:operation name="GetAssignedMediaSigningCertificationPaths">
<soap:operation soapAction="http://www.onvif.org/ver10/advancedsecurity/wsdl/GetAssignedMediaSigningCertificationPaths"/>
<wsdl:input>
<soap:body use="literal"/>
</wsdl:input>
<wsdl:output>
<soap:body use="literal"/>
</wsdl:output>
</wsdl:operation>
<wsdl:operation name="GetAssignedMediaSigningCertificates">
<soap:operation soapAction="http://www.onvif.org/ver10/advancedsecurity/wsdl/GetAssignedMediaSigningCertificates"/>
<wsdl:input>
<soap:body use="literal"/>
Expand Down