TC_A_10_CSMS — Update Charging Station Password for HTTP Basic Authentication - Rejected
TC_A_10_CSMS — Update Charging Station Password for HTTP Basic Authentication - Rejected
Source: OCPP 2.0.1 Part 6 — Test Cases (Core & Advanced Security, FINAL, 2023-06-30) — Functional block A. Security, page 340.
Identification
| Field | Value |
|---|---|
| Test case name | Update Charging Station Password for HTTP Basic Authentication - Rejected |
| Test case Id | TC_A_10_CSMS |
| Use case Id(s) | A01 |
| Requirement(s) | A01.FR.02, A01.FR.04, A01.FR.05 |
| System under test | CSMS |
| Functional block | A. Security |
Description
This test case defines how to use the BasicAuthPassword, the password used to authenticate Charging Stations in security profile 1 (Basic Authentication) and security profile 2 (TLS with Basic Authentication)
Purpose
To verify if the CSMS keeps accepting the old credentials and keeps communication when the new BasicAuthPassword is rejected as described at the OCPP specification.
Prerequisite(s)
The CSMS supports security profile 1 and/or 2
Before (Preparations)
Configuration State:
- N/a
Memory State:
- N/a
Reusable State(s):
- N/a
Main (Test scenario)
| Charging Station | CSMS |
|---|---|
| 2. The OCTT responds with a SetVariablesResponse; with status Rejected | 1. The CSMS sends a SetVariablesRequest with: setVariableData[1]:; - variable.name = "BasicAuthPassword"; - component.name = "SecurityCtrlr"; - attributeValue = "<NewPassword>" |
| 3. The OCTT sends a HTTP upgrade request with an Authorization header, containing a username/password combination (with the old BasicAuthPassword).; Note(s):; - The Authorization header is formatted as follows: AUTHORIZATION: Basic <Base64 encoded(<Configured ChargingStationId>:<OLD Configured BasicAuthPassword>)> | 4. The CSMS validates the username/password combination AND upgrades the connection to a (secured) WebSocket connection. |
| 5. The OCTT sends a BootNotificationRequest | 6. The CSMS responds with a BootNotificationResponse |
| 7. The OCTT notifies the CSMS about the current state of all connectors. | 8. The CSMS responds accordingly. |
Tool validations
Step 1:
Message: SetVariableRequest
- variable.name = "BasicAuthPassword"
- component.name = "SecurityCtrlr"
Step 6:
Message: BootNotificationResponse
- status must be Accepted
Post scenario validations
- N/a