Use operational credentials cluster in Commissioner

[pan-apple]

Problem

Need to integrate operational credentials provisioning with CHIP commissioner and device apps.

Summary of Changes

This PR brings in the integration of commissioner and device code with operational credentials cluster.
The controller provisions the operational certificates as part of the provisioning.
Provisioning of trusted root will be done as a separate PR, as it needs its own cluster.
There are some TODOs in the PR that are dependent on ZAP tool updates.

[todo]

- Update ZAP to use 16 bit length for OCTET_STRING. This is a temporary hack, as it only supports 8 bit strings

connectedhomeip/src/controller/CHIPDeviceController.cpp

Lines 1088 to 1098 in 64b0cc2

	// TODO - Update ZAP to use 16 bit length for OCTET_STRING. This is a temporary hack, as it only supports 8 bit strings
	if (opCertBuf.size() >= UINT8_MAX)
	{
	ByteSpan tempCertFragment(&opCertBuf.data()[UINT8_MAX], opCertBuf.size() - UINT8_MAX);
	ByteSpan opCertFragment(opCertBuf.data(), UINT8_MAX);
	ReturnErrorOnFailure(cluster.AddOpCert(successCallback, failureCallback, opCertFragment, tempCertFragment,
	ByteSpan(nullptr, 0), mLocalDeviceId, 0));
	}
	else
	{

---

This comment was generated by todo based on a TODO comment in 64b0cc2 in #6651. cc @pan-apple.

[todo]

(#5590) We should encode a response of status code for invalid TLV.

connectedhomeip/src/darwin/Framework/CHIP/gen/IMClusterCommandHandler.cpp

Lines 3720 to 3730 in 64b0cc2

	// TODO(#5590) We should encode a response of status code for invalid TLV.
	if (CHIP_NO_ERROR == TLVError && CHIP_NO_ERROR == TLVUnpackError && 7 == validArgumentCount)
	{
	// TODO(#5098) We should pass the Command Object and EndpointId to the cluster callbacks.
	emberAfOperationalCredentialsClusterOpCSRResponseCallback(apCommandObj, CSR, CSRLen, CSRNonce, VendorReserved1,
	VendorReserved2, VendorReserved3, Signature);
	}
	else
	{
	apCommandObj->AddStatusCode(nullptr, Protocols::SecureChannel::GeneralStatusCode::kBadRequest,
	Protocols::SecureChannel::Id, Protocols::SecureChannel::kProtocolCodeGeneralFailure);

---

This comment was generated by todo based on a TODO comment in 64b0cc2 in #6651. cc @pan-apple.

[todo]

(#5098) We should pass the Command Object and EndpointId to the cluster callbacks.

connectedhomeip/src/darwin/Framework/CHIP/gen/IMClusterCommandHandler.cpp

Lines 3723 to 3733 in 64b0cc2

	// TODO(#5098) We should pass the Command Object and EndpointId to the cluster callbacks.
	emberAfOperationalCredentialsClusterOpCSRResponseCallback(apCommandObj, CSR, CSRLen, CSRNonce, VendorReserved1,
	VendorReserved2, VendorReserved3, Signature);
	}
	else
	{
	apCommandObj->AddStatusCode(nullptr, Protocols::SecureChannel::GeneralStatusCode::kBadRequest,
	Protocols::SecureChannel::Id, Protocols::SecureChannel::kProtocolCodeGeneralFailure);
	ChipLogProgress(
	Zcl, "Failed to dispatch command, %d/%" PRIu32 " arguments parsed, TLVError=%" PRIu32 ", UnpackError=%" PRIu32,
	7, validArgumentCount, TLVError, TLVUnpackError);

---

This comment was generated by todo based on a TODO comment in 64b0cc2 in #6651. cc @pan-apple.

[todo]

(#5542): The cluster handlers should accept a ByteSpan for all string types.

connectedhomeip/src/darwin/Framework/CHIP/gen/IMClusterCommandHandler.cpp

Lines 3790 to 3800 in 64b0cc2

	// TODO(#5542): The cluster handlers should accept a ByteSpan for all string types.
	TLVUnpackError = aDataTlv.GetDataPtr(DebugText);
	if (CHIP_NO_ERROR == TLVUnpackError)
	{
	DebugTextExists = true;
	validArgumentCount++;
	}
	break;
	default:
	// Unsupported tag, ignore it.
	ChipLogProgress(Zcl, "Unknown TLV tag during processing.");

---

This comment was generated by todo based on a TODO comment in 64b0cc2 in #6651. cc @pan-apple.

[todo]

(#5590) We should encode a response of status code for invalid TLV.

connectedhomeip/src/darwin/Framework/CHIP/gen/IMClusterCommandHandler.cpp

Lines 3821 to 3831 in 64b0cc2

	// TODO(#5590) We should encode a response of status code for invalid TLV.
	if (CHIP_NO_ERROR == TLVError && CHIP_NO_ERROR == TLVUnpackError && 3 == validArgumentCount)
	{
	// TODO(#5098) We should pass the Command Object and EndpointId to the cluster callbacks.
	emberAfOperationalCredentialsClusterOpCertResponseCallback(apCommandObj, StatusCode, FabricIndex,
	const_cast<uint8_t *>(DebugText));
	}
	else
	{
	apCommandObj->AddStatusCode(nullptr, Protocols::SecureChannel::GeneralStatusCode::kBadRequest,
	Protocols::SecureChannel::Id, Protocols::SecureChannel::kProtocolCodeGeneralFailure);

---

This comment was generated by todo based on a TODO comment in 64b0cc2 in #6651. cc @pan-apple.

[todo]

(#5098) We should pass the Command Object and EndpointId to the cluster callbacks.

connectedhomeip/src/darwin/Framework/CHIP/gen/IMClusterCommandHandler.cpp

Lines 3824 to 3834 in 64b0cc2

	// TODO(#5098) We should pass the Command Object and EndpointId to the cluster callbacks.
	emberAfOperationalCredentialsClusterOpCertResponseCallback(apCommandObj, StatusCode, FabricIndex,
	const_cast<uint8_t *>(DebugText));
	}
	else
	{
	apCommandObj->AddStatusCode(nullptr, Protocols::SecureChannel::GeneralStatusCode::kBadRequest,
	Protocols::SecureChannel::Id, Protocols::SecureChannel::kProtocolCodeGeneralFailure);
	ChipLogProgress(
	Zcl, "Failed to dispatch command, %d/%" PRIu32 " arguments parsed, TLVError=%" PRIu32 ", UnpackError=%" PRIu32,
	3, validArgumentCount, TLVError, TLVUnpackError);

---

This comment was generated by todo based on a TODO comment in 64b0cc2 in #6651. cc @pan-apple.

[github-actions]

Size increase report for "nrfconnect-example-build" from 5abb72c

File	Section	File	VM
chip-shell.elf	text	4476	4476
chip-shell.elf	rodata	664	668
chip-shell.elf	device_handles	-12	-12
chip-lock.elf	text	4480	4480
chip-lock.elf	rodata	672	668
chip-lighting.elf	text	4512	4512
chip-lighting.elf	rodata	664	668

Full report output

BLOAT REPORT

Files found only in the build output:
    report.csv

Comparing ./master_artifact/chip-shell.elf and ./pull_artifact/chip-shell.elf:

sections,vmsize,filesize
.debug_info,0,18387
.debug_loc,0,7470
text,4476,4476
.debug_line,0,3962
.debug_abbrev,0,2979
.strtab,0,2086
.symtab,0,2032
.debug_str,0,1622
rodata,668,664
.debug_frame,0,588
.debug_ranges,0,584
.debug_aranges,0,192
.shstrtab,0,-2
device_handles,-12,-12

Comparing ./master_artifact/chip-lock.elf and ./pull_artifact/chip-lock.elf:

sections,vmsize,filesize
.debug_info,0,21717
.debug_loc,0,7432
text,4480,4480
.debug_line,0,3964
.debug_abbrev,0,3711
.strtab,0,2219
.symtab,0,2096
.debug_str,0,1640
rodata,668,672
.debug_frame,0,624
.debug_ranges,0,552
.debug_aranges,0,200
.shstrtab,0,1

Comparing ./master_artifact/chip-lighting.elf and ./pull_artifact/chip-lighting.elf:

sections,vmsize,filesize
.debug_info,0,21814
.debug_loc,0,7436
text,4512,4512
.debug_line,0,3925
.debug_abbrev,0,3705
.strtab,0,2237
.symtab,0,2144
.debug_str,0,1640
rodata,668,664
.debug_frame,0,664
.debug_ranges,0,552
.debug_aranges,0,200
.shstrtab,0,3