TC-ACE_1.5: Add

.github/workflows/tests.yaml

@@ -461,6 +461,7 @@ jobs:
  scripts/run_in_python_env.sh out/venv './scripts/tests/run_python_test.py --app out/linux-x64-all-clusters-ipv6only-no-ble-no-wifi-tsan-clang-test/chip-all-clusters-app --factoryreset --app-args "--discriminator 1234 --KVS kvs1 --trace-to json:out/trace_data/app-{SCRIPT_BASE_NAME}.json" --script "src/python_testing/TC_ACE_1_2.py" --script-args "--storage-path admin_storage.json --commissioning-method on-network --discriminator 1234 --passcode 20202021 --trace-to json:out/trace_data/test-{SCRIPT_BASE_NAME}.json --trace-to perfetto:out/trace_data/test-{SCRIPT_BASE_NAME}.perfetto"'
  scripts/run_in_python_env.sh out/venv './scripts/tests/run_python_test.py --app out/linux-x64-all-clusters-ipv6only-no-ble-no-wifi-tsan-clang-test/chip-all-clusters-app --factoryreset --app-args "--discriminator 1234 --KVS kvs1 --trace-to json:out/trace_data/app-{SCRIPT_BASE_NAME}.json" --script "src/python_testing/TC_ACE_1_4.py" --script-args "--storage-path admin_storage.json --commissioning-method on-network --discriminator 1234 --passcode 20202021 --int-arg PIXIT.ACE.APPENDPOINT:1 PIXIT.ACE.APPDEVTYPEID:0x0100 --string-arg PIXIT.ACE.APPCLUSTER:OnOff PIXIT.ACE.APPATTRIBUTE:OnOff --trace-to json:out/trace_data/test-{SCRIPT_BASE_NAME}.json --trace-to perfetto:out/trace_data/test-{SCRIPT_BASE_NAME}.perfetto"'
  scripts/run_in_python_env.sh out/venv './scripts/tests/run_python_test.py --app out/linux-x64-all-clusters-ipv6only-no-ble-no-wifi-tsan-clang-test/chip-all-clusters-app --factoryreset --app-args "--discriminator 1234 --KVS kvs1 --trace-to json:out/trace_data/app-{SCRIPT_BASE_NAME}.json" --script "src/python_testing/TC_ACE_1_3.py" --script-args "--storage-path admin_storage.json --commissioning-method on-network --discriminator 1234 --passcode 20202021 --trace-to json:out/trace_data/test-{SCRIPT_BASE_NAME}.json --trace-to perfetto:out/trace_data/test-{SCRIPT_BASE_NAME}.perfetto"'
+ scripts/run_in_python_env.sh out/venv './scripts/tests/run_python_test.py --app out/linux-x64-all-clusters-ipv6only-no-ble-no-wifi-tsan-clang-test/chip-all-clusters-app --factoryreset --app-args "--discriminator 1234 --KVS kvs1 --trace-to json:out/trace_data/app-{SCRIPT_BASE_NAME}.json" --script "src/python_testing/TC_ACE_1_5.py" --script-args "--storage-path admin_storage.json --commissioning-method on-network --discriminator 1234 --passcode 20202021 --PICS src/app/tests/suites/certification/ci-pics-values --trace-to json:out/trace_data/test-{SCRIPT_BASE_NAME}.json --trace-to perfetto:out/trace_data/test-{SCRIPT_BASE_NAME}.perfetto"'
  scripts/run_in_python_env.sh out/venv './scripts/tests/run_python_test.py --app out/linux-x64-all-clusters-ipv6only-no-ble-no-wifi-tsan-clang-test/chip-all-clusters-app --factoryreset --app-args "--discriminator 1234 --KVS kvs1 --trace-to json:out/trace_data/app-{SCRIPT_BASE_NAME}.json" --script "src/python_testing/TC_CGEN_2_4.py" --script-args "--storage-path admin_storage.json --commissioning-method on-network --discriminator 1234 --passcode 20202021 --trace-to json:out/trace_data/test-{SCRIPT_BASE_NAME}.json --trace-to perfetto:out/trace_data/test-{SCRIPT_BASE_NAME}.perfetto"'
  scripts/run_in_python_env.sh out/venv './scripts/tests/run_python_test.py --app out/linux-x64-all-clusters-ipv6only-no-ble-no-wifi-tsan-clang-test/chip-all-clusters-app --factoryreset --app-args "--discriminator 1234 --KVS kvs1 --trace-to json:out/trace_data/app-{SCRIPT_BASE_NAME}.json" --script "src/python_testing/TC_DA_1_2.py" --script-args "--storage-path admin_storage.json --commissioning-method on-network --discriminator 1234 --passcode 20202021 --PICS src/app/tests/suites/certification/ci-pics-values --trace-to json:out/trace_data/test-{SCRIPT_BASE_NAME}.json --trace-to perfetto:out/trace_data/test-{SCRIPT_BASE_NAME}.perfetto"'
  scripts/run_in_python_env.sh out/venv './scripts/tests/run_python_test.py --app out/linux-x64-all-clusters-ipv6only-no-ble-no-wifi-tsan-clang-test/chip-all-clusters-app --factoryreset --app-args "--discriminator 1234 --KVS kvs1 --trace-to json:out/trace_data/app-{SCRIPT_BASE_NAME}.json" --script "src/python_testing/TestGroupTableReports.py" --script-args "--storage-path admin_storage.json --commissioning-method on-network --discriminator 1234 --passcode 20202021 --trace-to json:out/trace_data/test-{SCRIPT_BASE_NAME}.json --trace-to perfetto:out/trace_data/test-{SCRIPT_BASE_NAME}.perfetto"'

src/python_testing/TC_ACE_1_5.py

@@ -0,0 +1,141 @@
+#
+# Copyright (c) 2024 Project CHIP Authors
+# All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+import logging
+
+import chip.clusters as Clusters
+from chip import ChipDeviceCtrl
+from chip.interaction_model import Status
+from matter_testing_support import MatterBaseTest, async_test_body, default_matter_test_main
+from mobly import asserts
+
+
+class TC_ACE_1_5(MatterBaseTest):
+
+ async def read_currentfabricindex(self, th: ChipDeviceCtrl) -> int:
+ cluster = Clusters.Objects.OperationalCredentials
+ attribute = Clusters.OperationalCredentials.Attributes.CurrentFabricIndex
+ current_fabric_index = await self.read_single_attribute_check_success(dev_ctrl=th, endpoint=0, cluster=cluster, attribute=attribute)
+ return current_fabric_index
+
+ async def write_acl(self, acl: Clusters.AccessControl, th: ChipDeviceCtrl):
+ result = await th.WriteAttribute(self.dut_node_id, [(0, Clusters.AccessControl.Attributes.Acl(acl))])
+ asserts.assert_equal(result[0].Status, Status.Success, "ACL write failed")
+
+ @async_test_body
+ async def test_TC_ACE_1_5(self):
+ self.print_step(1, "Comissioning, already done")
+ self.th1 = self.default_controller
+
+ # TODO: move into base class and adjust tests (#31521)
+ new_certificate_authority = self.certificate_authority_manager.NewCertificateAuthority()
+ new_fabric_admin = new_certificate_authority.NewFabricAdmin(vendorId=0xFFF1, fabricId=self.matter_test_config.fabric_id + 1)
+
+ TH1_nodeid = self.matter_test_config.controller_node_id
+ TH2_nodeid = self.matter_test_config.controller_node_id + 2
+
+ self.th2 = new_fabric_admin.NewController(nodeId=TH2_nodeid,
+ paaTrustStorePath=str(self.matter_test_config.paa_trust_store_path))
+
+ params = self.openCommissioningWindow(self.th1, self.dut_node_id)
+ self.print_step(2, "TH1 opens the commissioning window on the DUT")
+
+ errcode = self.th2.CommissionOnNetwork(
+ nodeId=self.dut_node_id, setupPinCode=params.commissioningParameters.setupPinCode,
+ filterType=ChipDeviceCtrl.DiscoveryFilterType.LONG_DISCRIMINATOR, filter=params.randomDiscriminator)
+ logging.info('Commissioning complete done. Successful? {}, errorcode = {}'.format(errcode.is_success, errcode))
+ self.print_step(3, "TH2 commissions DUT using admin node ID N2")
+
+ self.print_step(4, "TH2 reads its fabric index from the Operational Credentials cluster CurrentFabricIndex attribute")
+ th2FabricIndex = await self.read_currentfabricindex(self.th2)
+
+ self.print_step(
+ 5, "TH1 writes DUT Endpoint 0 ACL cluster ACL attribute, value is list of ACLEntryStruct containing 2 elements")
+ admin_acl = Clusters.AccessControl.Structs.AccessControlEntryStruct(
+ privilege=Clusters.AccessControl.Enums.AccessControlEntryPrivilegeEnum.kAdminister,
+ authMode=Clusters.AccessControl.Enums.AccessControlEntryAuthModeEnum.kCase,
+ subjects=[TH1_nodeid],
+ targets=[Clusters.AccessControl.Structs.AccessControlTargetStruct(endpoint=0, cluster=Clusters.AccessControl.id)])
+ descriptor_view = Clusters.AccessControl.Structs.AccessControlEntryStruct(
+ privilege=Clusters.AccessControl.Enums.AccessControlEntryPrivilegeEnum.kView,
+ authMode=Clusters.AccessControl.Enums.AccessControlEntryAuthModeEnum.kCase,
+ subjects=[],
+ targets=[Clusters.AccessControl.Structs.AccessControlTargetStruct(endpoint=0, cluster=Clusters.Descriptor.id)])
+ acl = [admin_acl, descriptor_view]
+ await self.write_acl(acl, self.th1)
+
+ self.print_step(
+ 6, "TH2 writes DUT Endpoint 0 ACL cluster ACL attribute, value is list of ACLEntryStruct containing 2 elements")
+ admin_acl = Clusters.AccessControl.Structs.AccessControlEntryStruct(
+ fabricIndex=th2FabricIndex,
+ privilege=Clusters.AccessControl.Enums.AccessControlEntryPrivilegeEnum.kAdminister,
+ authMode=Clusters.AccessControl.Enums.AccessControlEntryAuthModeEnum.kCase,
+ subjects=[TH2_nodeid],
+ targets=[Clusters.AccessControl.Structs.AccessControlTargetStruct(endpoint=0, cluster=Clusters.AccessControl.id)])
+ descriptor_view = Clusters.AccessControl.Structs.AccessControlEntryStruct(
+ fabricIndex=th2FabricIndex,
+ privilege=Clusters.AccessControl.Enums.AccessControlEntryPrivilegeEnum.kView,
+ authMode=Clusters.AccessControl.Enums.AccessControlEntryAuthModeEnum.kCase,
+ subjects=[],
+ targets=[Clusters.AccessControl.Structs.AccessControlTargetStruct(endpoint=0, cluster=Clusters.BasicInformation.id)])
+ acl = [admin_acl, descriptor_view]
+ await self.write_acl(acl, self.th2)
+
+ self.print_step(7, "TH1 reads DUT Endpoint 0 Descriptor cluster DeviceTypeList attribute")
+ await self.read_single_attribute_check_success(
+ dev_ctrl=self.th1, endpoint=0,
+ cluster=Clusters.Objects.Descriptor,
+ attribute=Clusters.Descriptor.Attributes.DeviceTypeList)
+
+ self.print_step(8, "TH1 reads DUT Endpoint 0 Basic Information cluster VendorID attribute")
+ await self.read_single_attribute_expect_error(
+ dev_ctrl=self.th1, endpoint=0,
+ cluster=Clusters.Objects.BasicInformation,
+ attribute=Clusters.BasicInformation.Attributes.VendorID,
+ error=Status.UnsupportedAccess)
+
+ self.print_step(9, "TH2 reads DUT Endpoint 0 Descriptor cluster DeviceTypeList attribute")
+ await self.read_single_attribute_expect_error(
+ dev_ctrl=self.th2, endpoint=0,
+ cluster=Clusters.Objects.Descriptor,
+ attribute=Clusters.Descriptor.Attributes.DeviceTypeList,
+ error=Status.UnsupportedAccess)
+
+ self.print_step(10, "TH2 reads DUT Endpoint 0 Basic Information cluster VendorID attribute")
+ await self.read_single_attribute_check_success(
+ dev_ctrl=self.th2, endpoint=0,
+ cluster=Clusters.Objects.BasicInformation,
+ attribute=Clusters.BasicInformation.Attributes.VendorID)
+
+ self.print_step(11, "TH1 resets the ACLs to default value by writing DUT EP0")
+ full_acl = Clusters.AccessControl.Structs.AccessControlEntryStruct(
+ privilege=Clusters.AccessControl.Enums.AccessControlEntryPrivilegeEnum.kAdminister,
+ authMode=Clusters.AccessControl.Enums.AccessControlEntryAuthModeEnum.kCase,
+ subjects=[TH1_nodeid],
+ targets=[])
+
+ acl = [full_acl]
+ await self.write_acl(acl, self.th1)
+
+ self.print_step(
+ 12, "TH1 removes the TH2 fabric by sending the RemoveFabric command to the DUT with the FabricIndex set to th2FabricIndex")
+ removeFabricCmd = Clusters.OperationalCredentials.Commands.RemoveFabric(th2FabricIndex)
+ await self.th1.SendCommand(nodeid=self.dut_node_id, endpoint=0, payload=removeFabricCmd)
+
+
+if __name__ == "__main__":
+ default_matter_test_main()

src/python_testing/matter_testing_support.py

@@ -25,6 +25,7 @@
 import os
 import pathlib
 import queue
+import random
 import re
 import sys
 import typing
@@ -43,6 +44,7 @@
 from chip import ChipDeviceCtrl # Needed before chip.FabricAdmin
 import chip.FabricAdmin # Needed before chip.CertificateAuthority
 import chip.CertificateAuthority
+from chip.ChipDeviceCtrl import CommissioningParameters
 
 # isort: on
 import chip.clusters as Clusters
@@ -358,6 +360,12 @@ def cluster_id_str(id):
  return f'{id_str(id)} {s}'
 
 
+@dataclass
+class CustomCommissioningParameters:
+ commissioningParameters: CommissioningParameters
+ randomDiscriminator: int
+
+
 @dataclass
 class AttributePathLocation:
  endpoint_id: int
@@ -707,6 +715,17 @@ def check_pics(self, pics_key: str) -> bool:
  pics_key = pics_key.strip().upper()
  return pics_key in picsd and picsd[pics_key]
 
+ def openCommissioningWindow(self, dev_ctrl: ChipDeviceCtrl, node_id: int) -> CustomCommissioningParameters:
+ rnd_discriminator = random.randint(0, 4095)
+ try:
+ commissioning_params = dev_ctrl.OpenCommissioningWindow(nodeid=node_id, timeout=900, iteration=1000,
+ discriminator=rnd_discriminator, option=1)
+ params = CustomCommissioningParameters(commissioning_params, rnd_discriminator)
+ return params
+
+ except InteractionModelError as e:
+ asserts.fail(e.status, 'Failed to open commissioning window')
+
  async def read_single_attribute(
  self, dev_ctrl: ChipDeviceCtrl, node_id: int, endpoint: int, attribute: object, fabricFiltered: bool = True) -> object:
  result = await dev_ctrl.ReadAttribute(node_id, [(endpoint, attribute)], fabricFiltered=fabricFiltered)