27 Commits

Author SHA1 Message Date
ThatSilentCoder
0b7a72805a [#896] Add basic Platform Certificate Class Registry support to the ACA (#898)
Some checks failed
Dotnet Provisioner Unit Tests / Restore and Run Unit Tests (ubuntu-20.04) (push) Has been cancelled
Dotnet Provisioner Unit Tests / Restore and Run Unit Tests (windows-2022) (push) Has been cancelled
HIRS Build and Unit Test / ACA_Provisioner_Unit_Tests (push) Has been cancelled
HIRS System Tests / DockerTests (push) Has been cancelled
Dotnet Provisioner Unit Tests / Evaluate Tests (push) Has been cancelled
* issue_896: first cut at changing the logic on the validator

* issue_896: Added more javadocs, still going through the process and figuring out places where this will work. Can successfully debug provisioner+aca.

* issue_896: slowly introducing component identifier v2 into multiple spots throughout out the app. Seems like we need to ensure that when we try to parse the pc from the identity claim, it needs to recognize the new kind of identifier.

* issue_896: deleted abstract plat form config class, replaced it with plat config v1 (which already exists), moved attribuutes associated with v2 to the v2 class, when validating the aca will now verify if the platform config associated with the cert is v1 or v2. Made corrections to attributes names to better align with tcg docs.

* issue_896:Added a new property to component info, made some more spelling corrections, deleted unused classes that were being referenced by componentinfo. pretty much done with the aca side of things.

* issue_896:I believe I have finished the issue. Further testing needs to be done. Will put in a WIP PR for now.

* issue_896: Made some more changes after viewing PR

* issue_896: Changed v3 to v4 in the github actions yaml files.

* issue_896: Fixed issues in one of the test classes, can now test other aspects of the SupplyChainCredentialValidator class. Will add more tests as more issues get fixed.

* issue_896: Hopefully GITHUB actions will be more forgiving.

* issue_896: Placed test task in the root build.gradle. Made more fixes to the test classes.

* issue_896: Realized there might be more work needed for the validation part. Started adding more logic to validation.

* issue_896: Last change before the long weekend. Hoping these changes will make github actions happy.

* issue_896: Verifying that this part works. We will need to figure out a smart/efficient way of comparing the components from platform cert and device info report.

* testing

* v3_issue_896: Should work for this PR.

* v3_issue_821: fixed the NPE issue we were getting during provisioning for missing component info.

* v3_issue_896: my copy/paste skills need work. Fixed the issue that was causing the docker tests to fail.

* v3_issue_896: trying to see if reverting the return call null will make a difference.

* v3_issue_896: should fix issues with pc found on certain devices

* v3_issue_896: part ii of should fix issues with pc found on certain devices
2025-04-02 06:29:03 -04:00
TheSilentCoder
9606b2abe0 issue_887: Added OWASP plugin. First run took about 40 minutes. Subsequent runs took about 2-4 minutes. Plugin downloads the NVD (National Vulnerability Database) the very first time the user runs the analyzeDependency command (assuming said user does not already have it cached somewhereon their system. Once downloaded, the plugin checks the subprojects dependenies against that of the NVD's and creates an HTML report per subproject on all the critical dependencies subproject has.
Some checks failed
Dotnet Provisioner Unit Tests / Restore and Run Unit Tests (ubuntu-20.04) (push) Has been cancelled
Dotnet Provisioner Unit Tests / Restore and Run Unit Tests (windows-2022) (push) Has been cancelled
HIRS Build and Unit Test / ACA_Provisioner_Unit_Tests (push) Has been cancelled
HIRS System Tests / DockerTests (push) Has been cancelled
Dotnet Provisioner Unit Tests / Evaluate Tests (push) Has been cancelled
2024-12-20 15:17:43 -05:00
TheSilentCoder
3d795a56ee issue_863: Updated gradle plugins version, fixed more vulnerabilities, now figuring what to do with the remaining vulnerabilities.
Some checks are pending
Dotnet Provisioner Unit Tests / Restore and Run Unit Tests (ubuntu-20.04) (push) Waiting to run
Dotnet Provisioner Unit Tests / Restore and Run Unit Tests (windows-2022) (push) Waiting to run
Dotnet Provisioner Unit Tests / Evaluate Tests (push) Blocked by required conditions
HIRS Build and Unit Test / ACA_Provisioner_Unit_Tests (push) Waiting to run
HIRS System Tests / DockerTests (push) Waiting to run
2024-12-18 16:44:41 -05:00
TheSilentCoder
1c39f8d9d5 issue_863: Updated gradle version, fixed more vulnerabilities, now figuring what to do with the remaining vulnerabilities.
Some checks failed
Dotnet Provisioner Unit Tests / Restore and Run Unit Tests (ubuntu-20.04) (push) Has been cancelled
Dotnet Provisioner Unit Tests / Restore and Run Unit Tests (windows-2022) (push) Has been cancelled
HIRS Build and Unit Test / ACA_Provisioner_Unit_Tests (push) Has been cancelled
HIRS System Tests / DockerTests (push) Has been cancelled
Dotnet Provisioner Unit Tests / Evaluate Tests (push) Has been cancelled
2024-12-17 14:58:41 -05:00
TheSilentCoder
301689ddb6 issue_863: reverted changes from last commit. let's see if that makes a difference 2024-11-27 16:53:35 -05:00
TheSilentCoder
028a52183c issue_863: removed unused dependencies and am currently resolving critical vulnerable dependendcies 2024-11-27 16:05:42 -05:00
TheSilentCoder
4798b16a47 issue_863: updated spring boot version. second try at it. 2024-11-26 19:49:30 -05:00
TheSilentCoder
d831d02123 issue_863: upgrading this slowly but surely again. testing to see if github's ci/cd is happy still with these set of changes. 2024-11-26 14:37:57 -05:00
TheSilentCoder
548c203c18 issue_863: upgrading this slowly but surely 2024-11-25 15:34:27 -05:00
TheSilentCoder
0a5de5316e Finished issue. Ready for PR 2024-10-15 15:14:59 -04:00
iadgovuser26
c60ea2121c Added additional checks during package install 2024-04-24 15:40:46 -04:00
Cyrus
c0cee9d597 Fixed a typo and included files I didn't on the initial push 2023-12-20 13:10:58 -05:00
Cyrus
4a9c579822 This is the first step for adding spotbugs (formerly findbugs) back into
the build.  The configuration is in place but the majority of the
projects are being excluded.  The eventlog (a small sample size) is
however being run with the proper corrections commited.
2023-12-20 12:55:50 -05:00
iadgovuser59
868ff8fe8c Fix to build.gradle on Eclipse 2023-06-14 18:05:40 -04:00
iadgovuser26
665e90b176 updated with package for the ACA [no ci] 2023-04-27 19:52:08 +00:00
iadgovuser26 iadgovuser26@empire.eclipse.ncsc.mil
ef65c6ad8b updated with package for tcg_rim_tool [no ci] 2023-03-17 14:47:10 -04:00
iadgovuser26
d862e95708 Added build and package creation for tcg_eventlog_tool [no ci] 2023-03-14 16:46:31 -04:00
Cyrus
86ef7d9356 Added back in HIRS_Utils 2023-03-06 20:48:51 -05:00
chubtub
c026e54da4 Upgrade log4j to 2.17.1. Remove unnecessary reference to log4j from tcg_eventlog_tool. 2022-01-12 16:19:19 -05:00
chubtub
c8438999c9 Upgraded log4j to 2.16.0 2021-12-14 11:54:10 -05:00
Cyrus
2d9bbe1bd7 initial commit 2021-02-01 11:24:20 -05:00
iadgovuser26
c70a11854b added a gradlew.bat for bulding the tcg_event_log on windows 2020-07-23 10:59:46 -04:00
chubtub
6ae5a18f99 Implement --create, --attributes, --out, and --help in JCommander
Add KeyName (subjectKeyIdentifier) and KeyValue (public key) to KeyInfo element

Implement --privateKeyFile and --publicCertificate in JCommander

Implement -v in JCommander. Clean up unit tests.

Implement support for PKCS1 in CredentialParser class.

Truncate # symbol after parsing subject key identifier

Close input streams in CredentialParser class

Closes #237
2020-06-08 06:50:46 -04:00
busaboy1340
00287725da
[#194] Update TPM Provisioner Docker images with latest PACCOR (v1.1.3r3) (#200)
* [#195] Components identified by Component Class will have hardware IDs translated to names

* Update TPM Docker images to latest PACCOR(v1.1.3r3). Comment out the
failing system tests caused by invalid input to PACCOR.
2019-11-07 09:37:06 -05:00
Cyrus
35c63efe19
[#24] Implementation of Component Class field (#114)
* This is new code that parses a new field in the upcoming TCG spec for the platform components fields. The new field indicates the type of hardware (ex Memory - DDR3). This information wasn't provided before so it wasn't always clear what the component was. The new information is provided in a json file. A unit test was created to test the different variations. This commit does not include hooks in the base code to use this class yet. This commit is mainly to include the added library and correct bug and checkstyle issues associated with the new code.

Closes #24

* Removed duplicate CONSTANT variable.

* Added newline

* Added Newline

* Updated variable names for json object.

* Fixed line length style error.
2019-03-25 11:14:19 -04:00
apldev3
00b1c913e4 [#12] Setup basic Travis CI build 2018-09-26 13:18:51 -04:00
apldev4
d7e44b8310 Initial release 2018-09-06 09:47:33 -04:00