Commit Graph

418 Commits

Author SHA1 Message Date
chubtub
c37dd127d3 Detect replacement RIM bundle and process accordingly during FW provisioning
Handle replacement base and support RIMs in their respective logic blocks
2024-09-18 16:16:48 -04:00
iadgovuser26 iadgovuser26@empire.eclipse.ncsc.mil
819fab24cb Updated server ssl cipher list 2024-08-19 16:49:00 -04:00
CAFB385655BEB1060E85B6C080B432F8EB2A2AF78459BD6532124977B933154A
3de50b0441
Implementing LDevID generation (#814) 2024-08-19 18:39:03 +00:00
5B96790E3664F40075A67E6ADF737EDB15B4408DBC91A81228B31537B0CE3E26
7c99b81b10
supplychainvalidationsummary will look up rims by ID (#805)
* Lookup here needed summary id from device object

* Portal linkage issue

* CertificatesUsed not working properly with RIM

* Maybe need to link to base rim

* Rim test 1 needed hw file

* Working on CI

* Connecting new tpm2_common

* Edited the way scripts called in docker exec

* TPM for reset each test

* Defining efi paths in CI env file

* Forgot to close while loops

* Connecting default test files

* Variable was wrong [no ci]

* Added ACA tests using uploaded artifacts

* Trying to chmod rim_setup.sh

* rim_setup chmod issues

* Added aca tests 9 and 10 to workflow

* Added cases 9 and 10 for aca policy tests

* Exit test scripts with error if one test fails

* Attempt to solve uploaded rim linkup

* Try only setting tagId if not null

* updateSupportRimInfo was not setting associated rim on base

* Attempt alternate lookup of rim by device name

* Trouble with event log archived

* Used wrong variable

* Fix spotbugs

* Try again

* Change SupplyChainValidation.message size to MAX_MESSAGE_LENGTH
2024-07-22 06:03:09 -04:00
D2B8CA1B27286366A8607B6858C0565962613D18D0546480078B520CD7AD705A
315d3a2f02
Move part of PciIds from AttestationCA back to Utils (#796)
* update pciids to acapciids throughout code

* add pciids to utils and update classes that use it

* moved the 4 vendor/device translate functions to the utils pciids

* added pciids translations to SPDM Device Context file

* cleaning up imports

* cleaning up comments

* cleaned up a few checkstyle warnings

* working to get class code

* update output message in main

* working on class code

* fixes/minor changes

* fixed check of class code list
2024-07-22 06:01:54 -04:00
iadgovuser26
ba21b2e114
Merge pull request #786 from nsacyber/v3_issue-783
Changed DB lookup of RIM EL objects, added null checks to Device.toString
2024-06-28 14:55:30 -04:00
iadgovuser29
806155e19d Don't show archived validation reports 2024-06-21 15:10:32 -04:00
iadgovuser58
ece30d420c did final move of the vendor-table.json file after testing; fixed json-accepted quotes in spdm file 2024-06-05 12:30:01 -04:00
chubtub
77de04b45f
Merge pull request #751 from nsacyber/v3_issue-737
[#737] Resolve RIM upload parse error
2024-05-15 23:07:51 -04:00
chubtub
f439652d0d Modified RIM details page controller to pass truststore certs to the RIM validator class. Modified the RIM validator class to log details when signature validation fails. 2024-05-14 00:37:19 -04:00
chubtub
6b612a9ec4 Use boolean flags to differentiate base and support RIMs with multi-file uploads 2024-05-07 17:28:37 -04:00
chubtub
a997c26a2d Check upload file extensions 2024-05-07 17:28:37 -04:00
chubtub
711e342972 Modify controller class to handle UnmarshalException caused by invalid xml to prevent frontend error 2024-05-07 17:28:37 -04:00
iadgovuser29
141f4236a8 DEBUG_OPTIONS in aca_bootRun.sh sets debug options for bootRun or war 2024-05-07 16:53:15 -04:00
iadgovuser29
f476b25053 Added debug flag to aca_bootRun.sh options. JVM will launch with debug 2024-05-07 16:02:24 -04:00
iadgovuser26
a903b0e448
Merge pull request #753 from nsacyber/v3_issue_749-setup_check
[#749] ACA setup check
2024-05-06 16:12:56 -04:00
CAFB385655BEB1060E85B6C080B432F8EB2A2AF78459BD6532124977B933154A
e8924dcbd7
Format certificate dates in UTC (#763) 2024-04-26 20:43:12 +00:00
iadgovuser26
c60ea2121c Added additional checks during package install 2024-04-24 15:40:46 -04:00
CAFB385655BEB1060E85B6C080B432F8EB2A2AF78459BD6532124977B933154A
49e53e9b1f
Create IDevID certificate page (#727)
Adding IDevID certificate page and parsing support
2024-04-18 20:28:11 +00:00
iadgovuser26
3e5dabaa2c added directory check before install 2024-04-04 16:27:02 -04:00
iadgovuser26
9b321c19cf
Merge pull request #746 from nsacyber/v3_issue-745
[#745] Adding GZIP compression to Tomcat server
2024-04-03 16:13:14 -04:00
iadgovuser26
92beb5814f
Merge pull request #735 from nsacyber/v3_issue_719-aca_service
Adds a his-aca service to Linux packaging scripts
2024-04-03 16:12:53 -04:00
iadgovuser59
752e373b22 Minor whitespace and newline character fixes 2024-04-03 11:08:13 -04:00
iadgovuser59
7ad4b63a18 Adding GZIP compression to Tomcat server 2024-03-28 16:15:56 -04:00
iadgovuser26
3c322d6b6a updated file permissions for Rocky 9 2024-03-28 15:27:36 -04:00
iadgovuser26
674564b79e Added the hirs-aca service 2024-03-18 12:32:30 -04:00
Cyrus
35ccce2e68
Merge pull request #733 from nsacyber/v3_issue-ignore-revision
[#707 #705] Delta Component compare part 2 and Policy Addition
2024-03-15 19:41:38 -04:00
iadgovuser26
8e1ec11c41 fixed merge conflict 2024-03-14 15:57:56 -04:00
Cyrus
750bf8d3d2 Another small change to line up provisioner certificate vs upload
certificate
2024-03-14 15:38:46 -04:00
Cyrus
cf08b1d2d3 Another minor change, didn't update the delta message for components and
add the restore function to the upload
2024-03-14 10:41:45 -04:00
Cyrus
350cf2b802 These are some minor updates while investigating a bug. 2024-03-14 10:12:40 -04:00
iadgovuser26
2b7fee432a Fixed selinux issue for Rocky 9 and Mysql restart for Ubuntu install 2024-03-13 13:49:42 -04:00
Cyrus
59998cb898 This is a merging of component red highlighting with the new policy to
ignore the revision attribute.
2024-03-12 08:10:51 -04:00
Cyrus
70ca2ced7b This is a continuation of the PR for 723 and issue 705. These changes
set up fixing the delta part of the provisioning of the attributes.
2024-03-06 15:16:05 -05:00
Cyrus
eada242284 These changes have been moved over from updates made for issue-705. The
primary function implemented in this set of changes is to track more
specifically what failed when the components of a certificate are
compared.  The implementation required a couple of new DB classes to be
created to store this information.  This is also to set up a better
visual comparison of what was expected vs what was actually found.  This
is similar to the RIM event compare failure page.
2024-03-01 15:29:10 -05:00
iadgovuser26 iadgovuser26@empire.eclipse.ncsc.mil
93805e4d3e added checks for previous installs 2024-02-23 15:19:02 -05:00
iadgovuser26 iadgovuser26@empire.eclipse.ncsc.mil
8d035ed50c Added checks for rocky 9 install 2024-02-21 13:16:13 -05:00
iadgovuser26 iadgovuser26@empire.eclipse.ncsc.mil
a549f28208 added buildWAr depedency to buildRpm and buildDeb 2024-02-16 13:40:03 -05:00
iadgovuser26 iadgovuser26@empire.eclipse.ncsc.mil
c92253ae40 Added mariadb and java 17 as required packages 2024-02-16 09:45:47 -05:00
iadgovuser26 iadgovuser26@empire.eclipse.ncsc.mil
2f19166a65 Added maraidb-server and java 17 as RPM dependencies 2024-02-14 09:53:57 -05:00
iadgovuser26
522bca3549 Fixed mariadb service stop with ACA RPM install 2024-02-13 09:00:17 -05:00
Cyrus
e819dad52b This commit sets up the suppression filter file. The locations previous
established have been removed.  The configuration is the root directory
2024-02-05 10:50:12 -05:00
Cyrus
ab5036982f Updated version for suppressions file 2024-02-02 08:37:44 -05:00
Cyrus
17bd7d9021 New branch because there seemed to be issues with the previous branch
merges.
2024-02-02 08:07:08 -05:00
Cyrus
5c20b6b9c3 Updated the code to properly check for database values that are archived
vs not archived
2024-01-24 16:02:46 -05:00
Cyrus
2e1ac19d21
Merge pull request #677 from nsacyber/v3_issue_668-version
Added VERSION file to /etc/hirs/aca
2024-01-22 16:51:03 -05:00
Cyrus
49eb2753fb
Merge pull request #670 from nsacyber/v3_bouncycastle-preq
BouncyCastle Prerequisite changes
2024-01-22 16:34:26 -05:00
iadgovuser26
1ccde9baff updated VERSION file placed in /etc/hirs/aca 2024-01-22 14:30:43 -05:00
Cyrus
f3b0be9ef9
Merge pull request #657 from nsacyber/issue-642-spotbugs-p2
[#642] HIRS_AttestationCA spotbug fixes
2024-01-19 07:58:57 -05:00
iadgovuser26
3f7cac13c7 added VERSION file to /opt/hirs 2024-01-16 18:28:40 -05:00