chore(tests): generate certificate chain for Tropic
What the developer wrote
Authored by Ioan Bizău
chore(tests): generate certificate chain for Tropic
[no changelog]
What changed, and why it matters
This commit only adds four test-only certificate and private-key files under the tests/tropic_model directory. They are clearly labeled as test fixtures, not used in production firmware, and the commit message explicitly says '[no changelog]'. There is no code change and no indication of a security fix or vulnerability.
No action required. Treat as routine test-data addition. If these keys are used in CI, ensure they are documented as test-only and not reused in production signing infrastructure, but that is outside the scope of this commit.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff adds PEM-encoded X.509 certificates and Ed25519 private keys (OID 1.3.6.1.4.1.11591.15.7 / ‘Ed25519’ via BouncyCastle-style ‘BgMrZXA’ base64) to tests/tropic_model/. These are synthetic test credentials for the Tropic model tests. No firmware, bootloader, crypto library, or application logic is modified. The keys are not referenced by any runtime component in this commit.
Changed components
tests/tropic_model/root_cert.pemtests/tropic_model/root_key.pemtests/tropic_model/tropic_cert.pemtests/tropic_model/tropic_key.pemInspect captured patch +22 / −0
diff --git a/tests/tropic_model/root_cert.pem b/tests/tropic_model/root_cert.pem
new file mode 100644
index 00000000..fe460ee4
--- /dev/null
+++ b/tests/tropic_model/root_cert.pem
@@ -0,0 +1,9 @@
+-----BEGIN CERTIFICATE-----
+MIIBMDCB46ADAgECAhRMR5WXXWH8xNquZfZtCCchQO757TAFBgMrZXAwDTELMAkG
+A1UEBhMCQ1owIBcNMjUxMDAxMTUzMzA2WhgPMjEyNTA5MDcxNTMzMDZaMA0xCzAJ
+BgNVBAYTAkNaMCowBQYDK2VwAyEAGrHF8S9FcODeXBao2f7qOB9TyNgT/usOsvt/
+OT8ra1+jUzBRMB0GA1UdDgQWBBSYDtrUTbT8JI4eHR/OIHl787VZ1zAfBgNVHSME
+GDAWgBSYDtrUTbT8JI4eHR/OIHl787VZ1zAPBgNVHRMBAf8EBTADAQH/MAUGAytl
+cANBAD2wmHseXqtUk2QJuwRUpdoestUlhKGRxrD1yhY8fxCvCzU+b4qZffXCyyk4
+qgDiTgdNHMz04zL6nKcNhT+geAQ=
+-----END CERTIFICATE-----
diff --git a/tests/tropic_model/root_key.pem b/tests/tropic_model/root_key.pem
new file mode 100644
index 00000000..0274cea9
--- /dev/null
+++ b/tests/tropic_model/root_key.pem
@@ -0,0 +1,3 @@
+-----BEGIN PRIVATE KEY-----
+MC4CAQAwBQYDK2VwBCIEIFia80j5qUKXL7JjYDHMKeubqMyC5aljqbu4fhO1FDJV
+-----END PRIVATE KEY-----
diff --git a/tests/tropic_model/tropic_cert.pem b/tests/tropic_model/tropic_cert.pem
new file mode 100644
index 00000000..9867509d
--- /dev/null
+++ b/tests/tropic_model/tropic_cert.pem
@@ -0,0 +1,7 @@
+-----BEGIN CERTIFICATE-----
+MIHlMIGYAhQGG6IBb+Vr7KDMTMGpx97heDXoxzAFBgMrZXAwDTELMAkGA1UEBhMC
+Q1owIBcNMjUxMDAxMTU1OTIwWhgPMjEyNTA5MDcxNTU5MjBaMBwxCzAJBgNVBAYT
+AkNaMQ0wCwYDVQQDDARUM1cxMCowBQYDK2VwAyEA/znnOD2vDW1Znx2ymKbAur+8
+R+x3vj8uL/e5VUqnH38wBQYDK2VwA0EAv0oPziPTmuCHIwBpKrMJrGWO/Nrs6x6q
+jnW/AvUBzEBCRSoIFx9/a8bV0VNpJo/q8k5GDQOL1ISCpvs7ylBpBA==
+-----END CERTIFICATE-----
diff --git a/tests/tropic_model/tropic_key.pem b/tests/tropic_model/tropic_key.pem
new file mode 100644
index 00000000..49e6a8f7
--- /dev/null
+++ b/tests/tropic_model/tropic_key.pem
@@ -0,0 +1,3 @@
+-----BEGIN PRIVATE KEY-----
+MC4CAQAwBQYDK2VwBCIEIKhBm/4pWnrgnqyx/uqbGD7iSaPoWIGGwQmjLz3baBrr
+-----END PRIVATE KEY-----
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.