Skip to content

GLOSSARY.md

Latest commit

 

History

History
42 lines (40 loc) · 3.13 KB

GLOSSARY.md

File metadata and controls

42 lines (40 loc) · 3.13 KB
Raw

Glossary

Terms used across specs, plans, and the runner. One line each so nobody re-derives them.

  • AP / DUT — the access point under test; the device under test. Supplied by whoever seeks certification; a black box the runner never builds or introspects.
  • Black-box — verified only from externally observable signals. No SSH / file inspection (except the opt-in SSH switch for config-conformance L2).
  • Runner — the software in this repo that executes the plans: impersonates the cloud, drives the DUT, observes, and judges. See ARCHITECTURE.md.
  • Rig — the subset of runner modules that impersonate cloud services (gateway, stubs, DHCP/DNS, packet plane). Part of the runner, not a separate system.
  • Gateway (built) — our own websocket + mTLS JSON-RPC server, NOT the real wlan-cloud-ucentralgw. Implements exactly the REQ-UC-37 dispatch set.
  • Stub — an impersonated cloud service (CDS, EST) with programmable responses and cert profiles.
  • Fixture — any in-process rig service the runner starts/programs/observes.
  • Scenario — one plan row (D-01, TG-06, AC-01): setup → stimulus → observe → assert. Lives in src/suites/.
  • Suite — the set of scenarios for one plan.
  • Oracle — the reference that predicts the correct verdict for a config (config-conformance). It answers "what should a conforming AP reply," and the AP is graded against it. Not the AP.
  • Verdict — the configure reply outcome: error 0 (Success) / 1 (Rejects, lenient) / 2 (Failed), plus rejected[].
  • Issue (a cert) — a CA signs a certificate. The EST stub issues the operational cert live from the AP's CSR. ("Mint" is informal jargon for the same; we say issue.)
  • Birth cert — the manufacture-time identity cert; its CN must equal the AP MAC.
  • Operational cert — the cert obtained via EST enrollment; used for all post-enrollment TLS.
  • PKI authority — the offline tool that pre-creates the coherent CA hierarchy + static cert bundles the stubs present. See src/pki/README.md.
  • Cert bundle / profile — a pre-created, named cert+key(+chain): valid / wrong-cn / untrusted / self-signed / expired, selected per scenario.
  • EST — Enrollment over Secure Transport; simpleenroll / simplereenroll / cacerts.
  • CDS — Cloud Discovery Service; the OpenLAN redirector queried at /v1/devices/<mac>.
  • Baseline schema — the wlan-ucentral-schema commit pinned for a release (SHA + version).
  • Manifest — the pinned inputs for a run (schema SHA, firmware, models, cert profiles, timeouts, SSH switch). See ARCHITECTURE.md §11.
  • Schema-node coverage — the "full" metric for config-conformance: every schema node hit by a positive (and, if constrained, a negative) case.
  • Tier (network) — direct-addressed (no MITM) vs lab MITM (DNS/DHCP/packet plane). Governs which plans are exercisable, not the AP image.
  • PASS / FAIL / ERROR — conformance pass, conformance fail, and rig/oracle fault (invalidates the run). See docs/coding-standard.md rule 4.