spdm-utils reproted Certificate doesn't contain tcg-dice-kp-eca

[kiran-sl-sndk]

Noticed a failure Certificate doesn't contain tcg-dice-kp-eca eventhough certificate has it.

Certificate snippet:

[alistair23]

Can you include the full log, steps to reproduce and the certificate chain?

[kiran-sl-sndk]

I am not sure i can add certificate chain in public platform.

This issue have noticed while running libspdm test.

Initially tcg-dice-kp-eca was not part of Certificate 3 and later got added. But still i am noticing this failure.

[alistair23]

SPDM-Utils isn't finding tcg-dice-kp-eca in your extended key usage section.

Without a reproducible test case it's going to be difficult to provide any more help then that

[kiran-sl-sndk]

This is the certificate.
Do we need to add tcg-dice-kp-eca in extended key usage section mandatory?
I see it added in

[alistair23]

Do we need to add tcg-dice-kp-eca in extended key usage section mandatory?

It must be in the Extended Key Usage: https://trustedcomputinggroup.org/wp-content/uploads/TCG_Errata_DICE_Certificate_Profiles_r02_pub.pdf

I can't really understand your screenshots unfortunately

[kiran-sl-sndk]

@alistair23 ,

Snippet attached above is the certificate.
In certificate 100.12 is not part if extendedKeyUsage.

Are you refering to the below notes in spec saying tcg-dice-kp-eca should be in extended key usage section?

[alistair23]

Snippet attached above is the certificate.

I understand, but I don't know which certificate or any other details. Without the full chain I can't provide much help unfortunately.