6 Certificate Usage

All Transport Layer Security (TLS) material is stored in a single certs/ directory relative to the evse_app binary:

<install_dir>/certs/

The package creates the directory structure, but the certificate files must be copied to the target in PEM format.

The certificate requirements depend on the configuration:

• OCPP: The requirements depend on the active securityProfile in config.json.
  • 0 or 1: No certificates are required.
  • 2: A CSMS root certificate is required.
  • 3: A client certificate and a private key are required.
• ISO 15118: The requirements depend on the ENABLE_TLS build flag in iso15118_app/app.c.
  • 1: TLS is enabled, and both the V2G certificate chain and the root certificate are required.
  • 0: Plain mode is enabled, and no certificates are required.

Refer to the Certificates section of the evse_app README for the complete directory layout.