From 1ed3424965a3ef0e14fb5b74028982e10eee5b00 Mon Sep 17 00:00:00 2001 From: Josh Rodriguez Date: Wed, 23 Sep 2026 15:36:18 +0100 Subject: [PATCH 1/5] Fix: update corim-full validity Update the validity of the corim-full template to expire in 2099. Signed-off-by: Josh Rodriguez --- data/corim/templates/.corim-full.json.swp | Bin 0 -> 12288 bytes data/corim/templates/corim-full.json | 2 +- 2 files changed, 1 insertion(+), 1 deletion(-) create mode 100644 data/corim/templates/.corim-full.json.swp diff --git a/data/corim/templates/.corim-full.json.swp b/data/corim/templates/.corim-full.json.swp new file mode 100644 index 0000000000000000000000000000000000000000..7ab7601fc1228af275584972a2cf0fb72ae51537 GIT binary patch literal 12288 zcmeI2yKdA#6ow}#4Mhk7(Ho~EV~@RS$6kpd3b&w5Xf{zUq!`=dtRvqvo&Zr4Xpnde zUVsYT0l_1rG{6~q7a@?A4heKd{xu$*bN)H=xmxW+Yd>rlcZ2OX+kQAJN5`H{4Q(mvshS3R{Vy&bbmg z1Z$ce=ec#%ROO$XF^&X~z)S+iDy6{!>A4Qmc}wPXKX|C|aS_!rE0r#8#+kvE(iC0ef;ju leD{&O*jo`n3TA$s(7x+LG<4#SvLH^wo^X0`8iV60`3^ov!khpA literal 0 HcmV?d00001 diff --git a/data/corim/templates/corim-full.json b/data/corim/templates/corim-full.json index 23e5f51..3661646 100644 --- a/data/corim/templates/corim-full.json +++ b/data/corim/templates/corim-full.json @@ -9,7 +9,7 @@ "profile": "tag:arm.com,2025:psa#1.0.0", "validity": { "not-before": "2021-12-31T00:00:00Z", - "not-after": "2025-12-31T00:00:00Z" + "not-after": "2099-12-31T00:00:00Z" }, "entities": [ { From 77af73f1b944e1bd1439213cd0724d18689f1c64 Mon Sep 17 00:00:00 2001 From: Josh Rodriguez Date: Wed, 23 Sep 2026 15:59:47 +0100 Subject: [PATCH 2/5] Fix: update all other corim templates validity Signed-off-by: Josh Rodriguez --- data/corim/templates/.corim-full.json.swp | Bin 12288 -> 0 bytes data/corim/templates/corim-cca-realm.json | 2 +- data/corim/templates/corim-cca.json | 2 +- data/corim/templates/meta-full.json | 2 +- 4 files changed, 3 insertions(+), 3 deletions(-) delete mode 100644 data/corim/templates/.corim-full.json.swp diff --git a/data/corim/templates/.corim-full.json.swp b/data/corim/templates/.corim-full.json.swp deleted file mode 100644 index 7ab7601fc1228af275584972a2cf0fb72ae51537..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 12288 zcmeI2yKdA#6ow}#4Mhk7(Ho~EV~@RS$6kpd3b&w5Xf{zUq!`=dtRvqvo&Zr4Xpnde zUVsYT0l_1rG{6~q7a@?A4heKd{xu$*bN)H=xmxW+Yd>rlcZ2OX+kQAJN5`H{4Q(mvshS3R{Vy&bbmg z1Z$ce=ec#%ROO$XF^&X~z)S+iDy6{!>A4Qmc}wPXKX|C|aS_!rE0r#8#+kvE(iC0ef;ju leD{&O*jo`n3TA$s(7x+LG<4#SvLH^wo^X0`8iV60`3^ov!khpA diff --git a/data/corim/templates/corim-cca-realm.json b/data/corim/templates/corim-cca-realm.json index f6b0766..76abb86 100644 --- a/data/corim/templates/corim-cca-realm.json +++ b/data/corim/templates/corim-cca-realm.json @@ -3,7 +3,7 @@ "profile": "http://arm.com/cca/realm/1", "validity": { "not-before": "2021-12-31T00:00:00Z", - "not-after": "2025-12-31T00:00:00Z" + "not-after": "2099-12-31T00:00:00Z" }, "entities": [ { diff --git a/data/corim/templates/corim-cca.json b/data/corim/templates/corim-cca.json index 59e536d..3a8ae45 100644 --- a/data/corim/templates/corim-cca.json +++ b/data/corim/templates/corim-cca.json @@ -3,7 +3,7 @@ "profile": "http://arm.com/cca/ssd/1", "validity": { "not-before": "2021-12-31T00:00:00Z", - "not-after": "2025-12-31T00:00:00Z" + "not-after": "2099-12-31T00:00:00Z" }, "entities": [ { diff --git a/data/corim/templates/meta-full.json b/data/corim/templates/meta-full.json index 5c46549..40f82d0 100644 --- a/data/corim/templates/meta-full.json +++ b/data/corim/templates/meta-full.json @@ -5,6 +5,6 @@ }, "validity": { "not-before": "2021-12-31T00:00:00Z", - "not-after": "2025-12-31T00:00:00Z" + "not-after": "2099-12-31T00:00:00Z" } } From 98fff2d3020d4dbed440d3e319f21bc1f78b58fc Mon Sep 17 00:00:00 2001 From: Josh Rodriguez Date: Thu, 24 Sep 2026 08:23:07 +0100 Subject: [PATCH 3/5] Chore: Update corim-full.cbor template Re-generate template to have new validity. Signed-off-by: Josh Rodriguez --- data/corim/corim-full.cbor | Bin 1495 -> 1499 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/data/corim/corim-full.cbor b/data/corim/corim-full.cbor index 1f895aeb7ff6cd2a1b3011c16ecde85c1621cbc9..02e8d7f93fc1ded414b30727a27b88e53e5311b5 100644 GIT binary patch delta 90 zcmcc4eVd#4Cgax$qO3O=e?{DxD0PSJCgaaY#>$O Date: Thu, 24 Sep 2026 08:29:13 +0100 Subject: [PATCH 4/5] Chore: Regenerate unsigned-corim.cbor As unsigned-corim.cbor is the same as corim-full.cbor, just copy and rename the former. See: https://github.com/veraison/cocli#create-3. Signed-off-by: Josh Rodriguez --- data/corim/unsigned-corim.cbor | Bin 815 -> 1499 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/data/corim/unsigned-corim.cbor b/data/corim/unsigned-corim.cbor index bcbe320de07ab754f17ab3c84100356a37cd43c3..02e8d7f93fc1ded414b30727a27b88e53e5311b5 100644 GIT binary patch delta 769 zcmZ3_cAJ~|Cgax$B5ch!8Gl9GnJ9IK?Iz>TNXE*Ie<~U4Z!-RlWLmU{sc|9WLWYHm zg;A-+C6x*uiFql-Itre7$$D%H85)}yBbn+JH8E8gG%=MKL>dUQv1_$?oU>(OWa9uc zm>Jobofudi2d)yZRAFDTm$_!a9>I_c&lx|Y`&*vY@t-7+sq=c@8(H<~wMP?EOXc{K ztN;EMHG4U$zQc8*)3n6jDcZ4v2bwWV8p`%4lF` z$Zf#M#vIDR#={gEY$#yB2jXz?u)9_y<`(3n8p;|-gG88lM4%!HAw{LdB?^vt$r<@Y z3z``B8ZExzM#((xm&<;?{mP^e)@YX}$a~3dgU6qHc1EuSFZ{FdFzP9)T)V;as`9J__#0s4_0+y+?zeAxl{vHy7i zlOP3dDuH+yXmoUNIxjC_a&0bSZ*4Ddb73!OZ*(s)1fl@J8ez^z00F@oX;f#ExdkHL C=q8u| From eccc68fd1ca72d725f47307717fa5e5d2668caf9 Mon Sep 17 00:00:00 2001 From: Josh Rodriguez Date: Thu, 24 Sep 2026 13:39:38 +0100 Subject: [PATCH 5/5] Chore: Regenerate signed-corim.cbor Regenerate this file by creating a cbor from corim-full.json, and signing it with meta-full.json. Signed-off-by: Josh Rodriguez --- data/corim/signed-corim.cbor | Bin 603 -> 1666 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/data/corim/signed-corim.cbor b/data/corim/signed-corim.cbor index 589457256d582120f12e6945765c79aacdadfb56..df4ab1d08536da6b22f503b86512c9798d4fb240 100644 GIT binary patch delta 1250 zcmcc3(!@IlDnQ_r%K1Togn~Xmr87o&XR463p=jtUU=ceiv6{Q#%7#iy)r|K3L80wap z=o;#p>KgDcFjg2iI{UgR1m!2D6qV-Xr4}i;q?V*6m*f{IfOIH0=U3*Jq$;?kWR_&+ z=P3jS81kl?=o#vnvM!a-PAw_QOw5tc1sg7*pOy?#T%RgoQjEns3A1FN-Aql3CFDy& zGEx=5_B!Vm733Esg3Ojs$N;+)=x7PWCPpTpx>Bg^!Kp=MnaQceItre7$$AnBIk}Z! zt5WsAidk3|NvKuGl$V$5rRSB_>*W`v>*oN~=M|?G>!%mw=#^BINNA)(h1eDfES8YS z0tN}xqY{$2ss%;)=|zdTDTyVCsuEHQ1%WE^5GwRiD^f+I7&sJOus1PAC@dEFqkAlQ zT~&7Wv5L|uti{uwZT^~hHsEjUZC~kKf9tigZZiIkWLmU{sc|9WLWYHmg;A-+C6x*u ziFqkdFR(3SXl!DPWU5=##8hR_#8hSwX&}tTuGQvo&X$RhjRVYJW@Kk}Vqke3xJtlM zg?-6h=9&e21Vb)7XZ(=vZ+TkBf096^&g*?|WYwqF9!*RwmE%*c{`*_htp4S!4%dlJ z(-QBSo|kqk)|vw*e;`b0`ZN4^wEc zp@0D&h{MIh?pl$UTac4#C~F`M5@F^Mfr==E6qOd2C^+UNXXF+#ju&55dRu;Vp3?3m(H#a{Q2($nGf`@xft)z6k&%I^p{1dzp|OE^ zlsK<3h-(Jrg3Pa{#79(!hk95a*Xa{n{@^w^#b}4eKT~O6GCDT=x6z zS0;t9M!P&g-b;2HJpSCXGkPs};h&9%QBP6j+6|^xm0$f2o*d7Zr(Gdcl9+ClSddIow1EQ=TpN+q82U|>8b1uT*#e`i#2Xwyy>eeT=9#_W@K(fXiw zh2@8{i*~$OsH^yP@!7W*AIgY4+_&@X_mbl&mrKuouYA0=xbj?5<8>mvc9lMew;0s{(@g#~UZfp{2bbaZe!FE3$oZ7ySPZ7*@q