A
Add Phase-1 eSIM provisioning implementation
Full working closed-loop eSIM provisioning stack (spec in claude.md / plan/):
Flask API, SQLite subscriber store, credential/profile generator, Open5GS
and free5gc core adapters, captive portal, operational scripts, systemd
units, network configs, and a 44-test suite.
Profile generation currently returns a mock JSON profile; real SGP.22
generation via pySim is the planned Phase-2 upgrade.
Fixes two bugs found while getting the suite green:
- generate_imsi hardcoded a 10-digit MSIN, producing 16-digit IMSIs for a
3-digit MNC; MSIN length is now 15 - len(mcc) - len(mnc).
- check_rate_limit compared timestamps as strings across mismatched formats
(SQLite CURRENT_TIMESTAMP vs Python isoformat); both sides now normalized
via SQLite datetime() so the window check is chronologically correct.
Add .gitignore for venv, caches, runtime config.yaml, and databases.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-01 01:56:31 -04:00
|
|
|
network:
|
|
|
|
|
mcc: "302"
|
|
|
|
|
mnc: "720"
|
|
|
|
|
plmn: "302720"
|
|
|
|
|
op_key: "63bfa50ee6523365ff14c1f45f88737d" # 16-byte hex OP key
|
|
|
|
|
|
|
|
|
|
wifi:
|
|
|
|
|
ssid: "Emergency-5G"
|
|
|
|
|
channel: 6
|
|
|
|
|
ip: "192.168.4.1"
|
|
|
|
|
subnet: "192.168.4.0/24"
|
|
|
|
|
dhcp_range: "192.168.4.10,192.168.4.250"
|
|
|
|
|
|
|
|
|
|
server:
|
|
|
|
|
host: "0.0.0.0"
|
|
|
|
|
port: 5000
|
|
|
|
|
debug: false
|
A
2026-07-01 18:01:59 -04:00
|
|
|
admin_token: "" # set a secret to enable /api/export (sent as X-Admin-Token); empty = export disabled
|
A
Add Phase-1 eSIM provisioning implementation
Full working closed-loop eSIM provisioning stack (spec in claude.md / plan/):
Flask API, SQLite subscriber store, credential/profile generator, Open5GS
and free5gc core adapters, captive portal, operational scripts, systemd
units, network configs, and a 44-test suite.
Profile generation currently returns a mock JSON profile; real SGP.22
generation via pySim is the planned Phase-2 upgrade.
Fixes two bugs found while getting the suite green:
- generate_imsi hardcoded a 10-digit MSIN, producing 16-digit IMSIs for a
3-digit MNC; MSIN length is now 15 - len(mcc) - len(mnc).
- check_rate_limit compared timestamps as strings across mismatched formats
(SQLite CURRENT_TIMESTAMP vs Python isoformat); both sides now normalized
via SQLite datetime() so the window check is chronologically correct.
Add .gitignore for venv, caches, runtime config.yaml, and databases.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-01 01:56:31 -04:00
|
|
|
|
|
|
|
|
database:
|
|
|
|
|
path: "/opt/esim-provisioning/data/subscribers.db"
|
|
|
|
|
|
|
|
|
|
rate_limiting:
|
|
|
|
|
max_profiles_per_mac: 1
|
|
|
|
|
window_hours: 1
|
|
|
|
|
|
|
|
|
|
core:
|
|
|
|
|
type: "none" # "open5gs" | "free5gc" | "none"
|
|
|
|
|
mongodb_uri: "mongodb://localhost:27017"
|
|
|
|
|
database_name: "open5gs"
|
|
|
|
|
|
|
|
|
|
profile:
|
|
|
|
|
carrier_name: "Ad-Hoc Network"
|
|
|
|
|
profile_name: "Emergency 5G"
|
|
|
|
|
apn: "internet"
|
A
2026-07-01 02:03:48 -04:00
|
|
|
smdp_address: "esim.local" # LPA activation-code SM-DP+ address
|
A
2026-07-01 22:35:54 -04:00
|
|
|
format: "v2" # "v2" (JSON, always available) | "saip" (real SGP.22 DER; needs requirements-saip.txt)
|