From a4ae28fdd6bfb6dfaebaf9fcf8a1123e080e77c4 Mon Sep 17 00:00:00 2001 From: Cedric Roux Date: Fri, 26 May 2023 12:11:30 +0200 Subject: [PATCH] ci: activate DRB ciphering and integrity protection We need to test security and integrity protection in the CI. This commit activates ciphering+integrity protection for SRBs and DRBs using nea2/nia2 for the amarisoft-ue + aw2s CI pipeline. --- .../gnb.sa.band78.51prb.aw2s.ddsuu.conf | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/ci-scripts/conf_files/gnb.sa.band78.51prb.aw2s.ddsuu.conf b/ci-scripts/conf_files/gnb.sa.band78.51prb.aw2s.ddsuu.conf index 5c37a2a413..3cbdc151d2 100644 --- a/ci-scripts/conf_files/gnb.sa.band78.51prb.aw2s.ddsuu.conf +++ b/ci-scripts/conf_files/gnb.sa.band78.51prb.aw2s.ddsuu.conf @@ -257,6 +257,23 @@ THREAD_STRUCT = ( } ); +security = { + # preferred ciphering algorithms + # the first one of the list that an UE supports in chosen + # valid values: nea0, nea1, nea2, nea3 + ciphering_algorithms = ( "nea2", "nea0" ); + + # preferred integrity algorithms + # the first one of the list that an UE supports in chosen + # valid values: nia0, nia1, nia2, nia3 + integrity_algorithms = ( "nia2", "nia0" ); + + # setting 'drb_ciphering' to "no" disables ciphering for DRBs, no matter + # what 'ciphering_algorithms' configures; same thing for 'drb_integrity' + drb_ciphering = "yes"; + drb_integrity = "yes"; +}; + log_config : { global_log_level ="info";