KDM construction

[japasanto]

Hi

I´ve been reading a lot of your fantastic tool and trying to use it in a php environment, it´s not been easy!, i don´t have any experience on RUBY so there is a lot of research i have to do.I´m realting everything with the dci manual and i have passed the part regarding the creation of certificates (root, intermediate and leaf) that on my understanding are need for the "machine" that will issue the kdm(which by the way is my goal). But now, i´m actually in the part of the kdm creation and i´m having a hard time understanding some parts so i was hopping you could help me. At this very moment i´m here between lines 1049 and 1062. I have the the self_signed_root.pem and intermediate.pem certificates of the projector where i want to test the kdm. What i don´t get it is:

• Where do i get/create the CertificateThumbprint_ on line 1049 ?
• Where do i get/generate those keys related with the KeyIdList and relate them with MDIK, MDAK ect (lines 1052 to 1062)?

Thanks for you time, regards.

[wolfgangw]

For CertificateThumbprint see dc_thumbprint().

cinemaslides stored content keys at DCP generation in a simple plaintext format, e.g. 73baf5de-e195-4542-ab28-8a465f7d4079:MDAK:5327fb7ec2e807bd57059615bf8a169d (<key id>:<key type>:<key>) and would pick those up from a specific keystore via their <key id> filename.

Remember that cinemaslides was a playground for exploring and learning. Content keys would not be stored as plaintext in a production tool, but rather in the form of DKDMs.