Merge branch 'pki-compatibility' into split-transactions-doc

# Conflicts:
#	docs/auth.md
#	docs/compliance.md
#	docs/model.md
#	docs/pki.md
#	docs/transactions.md
#	docs/upgrade.md
#	docs/validator-node.md
#	docs/vendor-info.md

Author: Artemkaaas

README-DEV.md

@@ -125,15 +125,15 @@ Start a local pool as described above, and then just execute
 dcld
 ```
 
-Have a look at [How To](docs/how-to.md) and [transactions](docs/transactions/transactions.md) for instructions how to configure and use the CLI.
+Have a look at [How To](docs/how-to.md) and [transactions](docs/transactions.md) for instructions how to configure and use the CLI.
 
 ## REST
 
 Start a local pool as described above.
 
 Every node exposes a REST API at `http://<node-host>:1317` (see <https://docs.cosmos.network/v0.45/core/grpc_rest.html>).
 
-Have a look at [transactions](docs/transactions/transactions.md) for a full list of REST endpoints.
+Have a look at [transactions](docs/transactions.md) for a full list of REST endpoints.
 
 ## Contributing
 

README.md

@@ -22,8 +22,8 @@ DC Ledger is based on [CometBFT](https://cometbft.com/) and [Cosmos SDK](https:/
 
 DC Ledger is a public permissioned ledger in the following sense:
 
-- Anyone can read from the ledger (that's why it's public). See [How to read from the Ledger](docs/transactions/transactions.md#how-to-read-from-the-ledger).
-- Writes to the ledger are permissioned. See [How to write to the Ledger](docs/transactions/transactions.md#how-to-write-to-the-ledger) for details.
+- Anyone can read from the ledger (that's why it's public). See [How to read from the Ledger](docs/transactions.md#how-to-read-from-the-ledger).
+- Writes to the ledger are permissioned. See [How to write to the Ledger](docs/transactions.md#how-to-write-to-the-ledger) for details.
 - PoA (proof of authority) approach is used for adding new validator nodes to the network
  (see [Add New Node Use Case](docs/use_cases/use_cases_add_validator_node.png)) and
   [Running Node](docs/running-node.md).
@@ -117,7 +117,7 @@ See [Run local pool](README-DEV.md#run-local-pool) section in [README-DEV.md](RE
 ### CLI
 
 - The same `dcld` binary as a Node
-- A full list of all CLI commands can be found there: [transactions.md](docs/transactions/transactions.md).
+- A full list of all CLI commands can be found there: [transactions.md](docs/transactions.md).
 - CLI can be used for write and read requests.
 - Please configure the CLI before using (see [how-to.md](docs/how-to.md#cli-configuration)).
 - **If there are no trusted Observer or Validator nodes to connect a CLI, then a [Light Client Proxy](#light-client-proxy) can be used.**
@@ -140,20 +140,20 @@ See [Run Light Client Proxy](docs/running-light-client-proxy.md) for details how
 - **There are no state proofs in REST, so REST queries should be sent to trusted Validator or Observer nodes only.**
 - OpenAPI specification: <https://zigbee-alliance.github.io/distributed-compliance-ledger/>.
 - Any running node exposes a REST API at port `1317`. See <https://docs.cosmos.network/v0.47/learn/advanced/grpc_rest>.
-- See [transactions](docs/transactions/transactions.md) for a full list of endpoints.
+- See [transactions](docs/transactions.md) for a full list of endpoints.
 - REST HTTP(S) queries can be directly used for read requests.
-  See [How to read from the Ledger](docs/transactions/transactions.md#how-to-read-from-the-ledger).
+  See [How to read from the Ledger](docs/transactions.md#how-to-read-from-the-ledger).
 - REST HTTP(S) queries can be directly used to broadcast generated and signed transaction.
 - Generation and signing of transactions need to be done in code or via CLI.
-  See [How to write to the Ledger](docs/transactions/transactions.md#how-to-write-to-the-ledger).
+  See [How to write to the Ledger](docs/transactions.md#how-to-write-to-the-ledger).
 
 ### gRPC
 
 - **There are no state proofs in gRPC, so gRPC queries should be sent to trusted Validator or Observer nodes only.**
 - Any running node exposes a REST API at port `9090`. See <https://docs.cosmos.network/v0.47/learn/advanced/grpc_rest>.
 - A client code can be generated for all popular languages from the proto files [proto](proto), see <https://grpc.io/docs/languages/>.
 - The generated client code can be used for read and write requests, i.e. generation and signing of transactions
-  See [How to read from the Ledger](docs/transactions/transactions.md#how-to-read-from-the-ledger) and [How to write to the Ledger](docs/transactions/transactions.md#how-to-write-to-the-ledger) for details.
+  See [How to read from the Ledger](docs/transactions.md#how-to-read-from-the-ledger) and [How to write to the Ledger](docs/transactions.md#how-to-write-to-the-ledger) for details.
 
 ### CometBFT RPC and Light Client
 
@@ -209,7 +209,7 @@ the following instructions from [how-to.md](docs/how-to.md) can be used for ever
 
 - [OpenAPI specification](https://zigbee-alliance.github.io/distributed-compliance-ledger/)
 - [Quick Start](docs/quickStartGuide.adoc)
-- [List of Transactions, Queries, CLI command, REST API](docs/transactions/transactions.md)
+- [List of Transactions, Queries, CLI command, REST API](docs/transactions.md)
 - [How To Guide](docs/how-to.md)
 - [Use Case Diagrams](docs/use_cases)
   - [PKI](docs/use_cases/use_cases_pki.png)

deployment/persistent_chains/testnet-2.0/testnet-2.0-csa-endpoints.md

@@ -1,6 +1,6 @@
 # Testnet 2.0 CSA public endpoints
 
-- `REST` - <https://on.test-net.dcl.csa-iot.org>
+[//]: # (- `REST` - <https://on.test-net.dcl.csa-iot.org>)
 - `RPC` - <https://on.test-net.dcl.csa-iot.org:26657>
 - `gRPC` - on.test-net.dcl.csa-iot.org:8443
 - `Seed Node` - 100.25.175.140:26656

docs/transactions/auth.md docs/auth.md

@@ -96,7 +96,7 @@ Retrieve NOC root certificates associated with a specific VID.
 - CLI Command:
   - `dcld query pki get_noc_x509_root_certs --vid=<uint16>`
 - REST API:
-  - GET `/dcl/pki/noc-root-certificates/{vid}`
+  - GET `/dcl/pki/noc-vid-root-certificates/{vid}`
 
 ### GET_ALL_NOC_X509_ROOT_CERTS
 

docs/transactions/compliance.md docs/compliance.md

@@ -6,7 +6,7 @@ This document contains tutorials demonstrating how to accomplish common tasks us
 - If write requests to the Ledger needs to be sent, please make sure that you have
 an Account created on the Ledger with an appropriate role (see [Getting Account](#getting-account) section in [how-to.md](how-to.md)).
 - Sending read requests to the Ledger doesn't require an Account (Ledger is public for reads).
-- A full list of all CLI commands with all parameters can be found there: [transactions](transactions/transactions.md).
+- A full list of all CLI commands with all parameters can be found there: [transactions](transactions.md).
 - After the CLI is configured and Account with an appropriate role is created,
 the following instructions can be used for every role (see [Use Case Diagrams](use_cases)):
   - [Trustee](#trustee-instructions)

docs/design/noc-root-cert-design.md

@@ -60,7 +60,7 @@ One of the trustees proposes the upgrade using the following steps:
       ```
       Please note, that it must be called against the `dcld` binary, not the platform archive itself. So, for Ubuntu, either take a `dcld` binary from the root folder of the release, or extract it from ` dcld.ubuntu.tar.gz`.
 
-   2. Sends [`ProposeUpgrade`](transactions/transactions.md#propose_upgrade) transaction
+   2. Sends [`ProposeUpgrade`](transactions.md#propose_upgrade) transaction
       with the name of the new upgrade handler, the chosen ledger height and the
       info containing URLs of the new application version binaries for supported
       platforms with the calculated checksums.
@@ -92,7 +92,7 @@ Each of them uses the following steps to accomplish this:
          ```
        Please note, that it must be called against the `dcld` binary, not the platform archive itself. So, for Ubuntu, either take a `dcld` binary from the root folder of the release, or extract it from ` dcld.ubuntu.tar.gz`.
 
-2. Sends [`ApproveUpgrade`](transactions/transactions.md#approve_upgrade) transaction
+2. Sends [`ApproveUpgrade`](transactions.md#approve_upgrade) transaction
     with the name of the proposed upgrade.
 
     For example:

docs/how-to.md

@@ -27,10 +27,10 @@ Any upgrade plan has the following fields:
 ## Workflow
 
 Initially an upgrade plan is proposed by one of trustees using
-[propose-upgrade](transactions/transactions.md#propose_upgrade) command. Then the proposed
+[propose-upgrade](transactions.md) command. Then the proposed
 upgrade plan has to be approved by the majority of trustees (2/3 including the
 trustee who has proposed it) using
-[approve-upgrade](transactions/transactions.md#approve_upgrade) command. When the necessary
+[approve-upgrade](transactions.md#approve_upgrade) command. When the necessary
 count of approvals is gathered, the upgrade plan turns into the approved state
 and is actually scheduled.
 
@@ -81,5 +81,5 @@ checksum when the URL is provided in the specified format. If the downloaded
 file checksum does not equal to the checksum provided in the URL, `go-getter`
 reports that checksums did not match. To view `Info` field value of an upgrade
 plan, just execute an appropriate query command from `dclupgrade` or `upgrade`
-module. See [Upgrade CLI commands reference](transactions/transactions.md#upgrade) for
+module. See [Upgrade CLI commands reference](transactions.md#upgrade) for
 details.

docs/transactions/model.md docs/model.md

@@ -10209,7 +10209,7 @@ paths:
           type: string
       tags:
         - Query
-  /dcl/pki/noc-certificates/{subject}:
+  /dcl/pki/all-noc-certificates/{subject}:
     get:
       summary: Queries a NocCertificatesBySubject by index.
       operationId: NocCertificatesBySubject
@@ -10256,7 +10256,7 @@ paths:
           type: string
       tags:
         - Query
-  /dcl/pki/noc-certificates/{subject}/{subjectKeyId}:
+  /dcl/pki/all-noc-certificates/{subject}/{subjectKeyId}:
     get:
       summary: Queries a NocCertificates by index.
       operationId: NocCertificates
@@ -10384,7 +10384,7 @@ paths:
           type: string
       tags:
         - Query
-  /dcl/pki/noc-certificates/{vid}/{subjectKeyId}:
+  /dcl/pki/noc-vid-certificates/{vid}/{subjectKeyId}:
     get:
       summary: Queries a NocCertificatesByVidAndSkid by index.
       operationId: NocCertificatesByVidAndSkid
@@ -10716,7 +10716,7 @@ paths:
           type: boolean
       tags:
         - Query
-  /dcl/pki/noc-ica-certificates/{vid}:
+  /dcl/pki/noc-vid-ica-certificates/{vid}:
     get:
       summary: Queries a NocIcaCertificates by index.
       operationId: NocIcaCertificates
@@ -11039,7 +11039,7 @@ paths:
           type: boolean
       tags:
         - Query
-  /dcl/pki/noc-root-certificates/{vid}:
+  /dcl/pki/noc-vid-root-certificates/{vid}:
     get:
       summary: Queries a NocRootCertificates by index.
       operationId: NocRootCertificates

docs/transactions/pki.md docs/pki.md

@@ -27,6 +27,7 @@ require (
 	github.com/spf13/pflag v1.0.5
 	github.com/spf13/viper v1.14.0
 	github.com/stretchr/testify v1.8.4
+	golang.org/x/tools v0.6.0
 	google.golang.org/genproto/googleapis/api v0.0.0-20240102182953-50ed04b92917
 	google.golang.org/grpc v1.60.1
 	google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.1.0
@@ -206,7 +207,6 @@ require (
 	golang.org/x/sys v0.16.0 // indirect
 	golang.org/x/term v0.15.0 // indirect
 	golang.org/x/text v0.14.0 // indirect
-	golang.org/x/tools v0.6.0 // indirect
 	google.golang.org/api v0.149.0 // indirect
 	google.golang.org/appengine v1.6.8 // indirect
 	google.golang.org/genproto v0.0.0-20240102182953-50ed04b92917 // indirect

docs/pool-upgrade-how-to.md

@@ -283,6 +283,18 @@ response_does_not_contain "$result" "\"subjectKeyId\": \"$da_root_subject_key_id
 
 test_divider
 
+echo "Request DA certificates by subject using global command"
+result=$(dcld query pki all-subject-certs --subject=$da_root_subject)
+echo $result | jq
+check_response "$result" "\"$da_root_subject\""
+check_response "$result" "\"$da_root_subject_key_id\""
+
+echo "Request NOC certificates by subject using global command"
+result=$(dcld query pki all-subject-certs --subject=$noc_root_subject)
+echo $result | jq
+check_response "$result" "\"$noc_root_subject\""
+check_response "$result" "\"$noc_root_subject_key_id\""
+
 echo "Request all DA certificates by subject must be empty"
 result=$(dcld query pki all-subject-x509-certs --subject="$da_root_subject")
 echo $result | jq

docs/pool-upgrade.md

@@ -517,10 +517,6 @@ check_response "$result" "\"code\": 0"
 echo "Request all revoked certificates should not contain leaf certificate"
 result=$(dcld query pki all-revoked-noc-x509-ica-certs)
 echo $result | jq
-check_response "$result" "\"subject\": \"$noc_root_cert_1_subject"
-check_response "$result" "\"subjectKeyId\": \"$noc_root_cert_1_subject_key_id\""
-check_response "$result" "\"serialNumber\": \"$noc_root_cert_1_serial_number\""
-check_response "$result" "\"serialNumber\": \"$noc_root_cert_1_copy_serial_number\""
 check_response "$result" "\"subject\": \"$noc_cert_1_subject\""
 check_response "$result" "\"subjectKeyId\": \"$noc_cert_1_subject_key_id\""
 check_response "$result" "\"serialNumber\": \"$noc_cert_1_serial_number"
@@ -582,3 +578,7 @@ response_does_not_contain "$result" "\"subjectKeyId\": \"$noc_root_cert_1_subjec
 response_does_not_contain "$result" "\"serialNumber\": \"$noc_root_cert_1_serial_number\""
 response_does_not_contain "$result" "\"serialNumber\": \"$noc_root_cert_1_copy_serial_number\""
 echo $result | jq
+
+test_divider
+
+echo "PASS"

docs/static/openapi.yml

@@ -0,0 +1,14 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

docs/transactions/transactions.md docs/transactions.md

@@ -0,0 +1,15 @@
+-----BEGIN CERTIFICATE-----
+MIICajCCAg+gAwIBAgIUabT4B41R7EGiVRuGLVVT8ciZoHQwCgYIKoZIzj0EAwIw
+gYIxCzAJBgNVBAYTAlVaMRMwEQYDVQQIDApTb21lIFN0YXRlMRMwEQYDVQQHDApT
+b21lIFN0YXRlMRgwFgYDVQQKDA9FeGFtcGxlIENvbXBhbnkxGTAXBgNVBAsMEFRl
+c3RpbmcgRGl2aXNpb24xFDASBgNVBAMMC05PQy1jaGlsZC0zMCAXDTI0MTEwNTA3
+MzM1OFoYDzMwMjQwMzA4MDczMzU4WjCBgTELMAkGA1UEBhMCVVoxEzARBgNVBAgM
+ClNvbWUgU3RhdGUxEzARBgNVBAcMClNvbWUgU3RhdGUxGDAWBgNVBAoMD0V4YW1w
+bGUgQ29tcGFueTEZMBcGA1UECwwQVGVzdGluZyBEaXZpc2lvbjETMBEGA1UEAwwK
+Tk9DLWxlYWYtMzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABIL2WFA6/dAEs+HG
+mRRpAW6ouppZMuoVRM8SIoVXLpEOxLZzfsSSCWrF3BJtyu8WpiL6mxb5mdfytvA0
+oehKoZqjYDBeMB0GA1UdDgQWBBQsR2j9ET9opRb5vumlasDN1UCTgTAfBgNVHSME
+GDAWgBTe+R2Q1aEPI1lcP1zHLTFYL6h5MzAMBgNVHRMEBTADAQH/MA4GA1UdDwEB
+/wQEAwIBgjAKBggqhkjOPQQDAgNJADBGAiEA323Q//UQgpjYpnecDrY7OgkSA+zQ
+oLKiFhXYt6vVEx0CIQCEOOIyKNZ/P5XkBGWGpEIVVl+H5kEKhWfX7N4xIHBJOw==
+-----END CERTIFICATE-----

docs/transactions/upgrade.md docs/upgrade.md

@@ -0,0 +1,14 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

docs/transactions/validator-node.md docs/validator-node.md

@@ -0,0 +1,14 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

docs/transactions/vendor-info.md docs/vendor-info.md

@@ -0,0 +1,13 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

go.mod

@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----