iadgovuser26
|
e07feb4be1
|
Merge pull request #421 from nsacyber/issue-418
[#418] Change json parsing package
|
2021-12-02 11:05:22 -05:00 |
|
iadgovuser26
|
f8e549a458
|
Merge pull request #399 from nsacyber/certificate-bulk-download
Bulk Certificate Download
|
2021-12-02 11:04:40 -05:00 |
|
Cyrus
|
68be67b73a
|
Added default values to the provisioner for tcg certs and rim files
|
2021-12-01 13:57:18 -05:00 |
|
Cyrus
|
139e4c8972
|
Added null pointer check to RDR variable.
|
2021-11-24 14:27:15 -05:00 |
|
iadgovuser29
|
95c5e40f89
|
Utilize protobuf to parse claim response. Work on array handling on ACA.
|
2021-11-23 22:01:16 -05:00 |
|
Cyrus
|
483099a273
|
Updated the policy code to modify the measurement array length and ignore PCR 10 as well.
|
2021-11-23 10:06:21 -05:00 |
|
Cyrus
|
cf4e641273
|
Added log statement for quote.
|
2021-11-23 09:40:11 -05:00 |
|
Cyrus
|
4c46758d9a
|
This commit is a feature update. The IMA PCR enable/diable is being enhanced to update the mask the provisioner uses to pull the quote from the TPM. This code will send down a string range of PCR values that excludes PCR 10. The quote that is returned should be a composite without the PCR 10. There will be a log statement in this commit that should be removed.
|
2021-11-23 09:36:00 -05:00 |
|
chubtub
|
a3ef981206
|
Merge branch 'issue-381' of github.com:nsacyber/HIRS into issue-381
|
2021-11-19 01:50:32 -05:00 |
|
chubtub
|
1eca360a4d
|
Modify log messages so that validation failures from certs in the keystore that are not actually in the chain do not raise undue attention
|
2021-11-19 01:50:05 -05:00 |
|
5B96790E3664F40075A67E6ADF737EDB15B4408DBC91A81228B31537B0CE3E26
|
3f091a3827
|
Merge pull request #415 from nsacyber/issue/414
[#414] Handle MODIFIED component without serial number
|
2021-11-18 08:54:09 -05:00 |
|
lareine
|
979adfdae3
|
System test passes
|
2021-11-17 11:33:44 -05:00 |
|
chubtub
|
893c1db804
|
Merge pull request #416 from nsacyber/support-file-revision
Vendor Table JSON refactor
|
2021-11-17 10:55:31 -05:00 |
|
chubtub
|
8b5027de4c
|
Modify log messages so that validation failures from certs in the keystore that are not actually in the chain do not raise undue attention
|
2021-11-17 10:15:31 -05:00 |
|
chubtub
|
23a086c925
|
Merge branch 'issue-381' of github.com:nsacyber/HIRS into issue-381
|
2021-11-17 10:06:58 -05:00 |
|
lareine
|
f74c5f72e7
|
System test failure
|
2021-11-17 09:20:07 -05:00 |
|
lareine
|
da502fbf42
|
ci system test refactor
|
2021-11-16 17:11:40 -05:00 |
|
chubtub
|
d5fcd06902
|
Add error handling to clarify endorsement validation error
|
2021-11-16 16:59:56 -05:00 |
|
lareine
|
f939604822
|
updated docker login
|
2021-11-16 16:57:44 -05:00 |
|
lareine
|
09d71ddc18
|
initial ci system test refactor
|
2021-11-16 16:51:42 -05:00 |
|
Cyrus
|
cfb9cb7535
|
Uncommented the code that deals with the signing certificate.
|
2021-11-15 09:43:31 -05:00 |
|
Cyrus
|
d31b710824
|
This is a test run to ignore endorsement credential verification during firmware testing.
|
2021-11-12 14:24:33 -05:00 |
|
Cyrus
|
c944aab335
|
Added a log statement to get more information about the certificate that is failing signature verification.
|
2021-11-12 11:31:00 -05:00 |
|
chubtub
|
064dab89c8
|
Change from com.eclipsesource.json package to javax.json for parsing
|
2021-11-10 12:59:13 -05:00 |
|
chubtub
|
d183504a3f
|
Merge branch 'master' into issue-381
|
2021-11-10 10:08:42 -05:00 |
|
Cyrus
|
0934b3106f
|
Merge pull request #420 from nsacyber/base-rim-link-fix
RimLinkHash Fix
|
2021-11-10 10:06:11 -05:00 |
|
Cyrus
|
70d92c4b38
|
Merge pull request #417 from nsacyber/issue-404
[#404] PXE Policy options
|
2021-11-10 10:05:52 -05:00 |
|
Cyrus
|
04b050de15
|
The rimlinkhash meta information wasn't linking up with the associated swidtag. This is because the wrong hash look up was being used. Previously when the hexDecHash and base64Hash were implemented, the main focus was on the rimel and not the swidtag.
|
2021-11-10 09:50:17 -05:00 |
|
Cyrus
|
2d9fb19d38
|
Updated the new polices after doing a bit of testing to make sure that they do ignore when there is a failure on that specific bit.
|
2021-11-10 07:27:33 -05:00 |
|
Cyrus
|
2547cb6cce
|
This initial commit updates the location of the vendor-table.json which is used by the ACA and the eventlog tool. The previous change moved the vendor-table.json to a separate folder, however the code was not updated to reflect the change. This instead updates how the two install handle the file. The ACA was updated not to clobber the file if it exists and the eventlog tool was updated to do the same through an additional script called post install.
|
2021-11-09 08:32:04 -05:00 |
|
chubtub
|
e0a1e53d93
|
Handle an exception thrown when the provisioner fails to send RIM files to the ACA
|
2021-11-08 14:51:38 -05:00 |
|
chubtub
|
0c233ae771
|
Set signature validity so that the ACA can report accurately
|
2021-11-08 14:51:38 -05:00 |
|
chubtub
|
3a6be133eb
|
Checkstyle changes
|
2021-11-08 14:51:38 -05:00 |
|
chubtub
|
bc7e07583f
|
Match only the actual extension bytes of the SKID
|
2021-11-08 14:51:38 -05:00 |
|
chubtub
|
962ca45bb7
|
Modify ACA RIM validation to search for a signing cert if the base RIM does not have an embedded cert. Validate the ca chain of the found signing cert.
|
2021-11-08 14:46:04 -05:00 |
|
Cyrus
|
f0ea84d199
|
I added code to do different masks on the pcr selection, but that was not needed. So I just uncommented the one section of ignore not being used.
|
2021-11-05 16:11:28 -04:00 |
|
chubtub
|
7bb9d8698d
|
Merge pull request #408 from nsacyber/support-rim-filename-correction
Support RIM Filename Fix
|
2021-11-05 08:57:06 -04:00 |
|
Cyrus
|
bd5d905990
|
Updated the code to include bulk downloads for issued, eks.
|
2021-11-04 15:55:55 -04:00 |
|
Cyrus
|
e82de12341
|
Updated the ignore OS events check with the last rule for #404
|
2021-11-01 09:35:36 -04:00 |
|
Cyrus
|
fe617ea948
|
Updated the policy code to ignore based on the TPM Log Event. Added in the code for OS Events.
|
2021-10-29 20:24:46 -04:00 |
|
Cyrus
|
2b7b4bfdd1
|
Updated the labeling for the Trust chain and platform certificates. The import label is removed and the download icon moved next to the import button. Added the same functionality to the RIMs.
|
2021-10-29 15:42:57 -04:00 |
|
Cyrus
|
aae6845730
|
Initial Commit. This adds the visual object to the policy page.
|
2021-10-29 14:55:23 -04:00 |
|
iadgovuser29
|
4403a98b3b
|
[#414] Handle MODIFIED component without serial number
|
2021-10-29 09:02:56 -04:00 |
|
iadgovuser26
|
5434fe8ca7
|
Merge pull request #412 from nsacyber/issue/411
[#411] Changed assumption regarding Delta cert components with ADDED status
|
2021-10-28 10:02:05 -04:00 |
|
Cyrus
|
04a66da5f3
|
Merge pull request #413 from nsacyber/cpp-compiler-warning-fix
Cpp Compiler Warning fixes
|
2021-10-27 16:12:36 -04:00 |
|
Cyrus
|
79127e57d1
|
Initi commit. There are warning that newer compilers are throwing for vector.at and vector.size. These are removed. In addition a char** in a main parameter was made into a const.
|
2021-10-27 14:55:50 -04:00 |
|
iadgovuser29
|
867833dc9d
|
[#411] Changed assumption regarding Delta cert components with ADDED status.
|
2021-10-27 14:14:09 -04:00 |
|
iadgovuser26
|
cf97b15b13
|
Merge pull request #410 from nsacyber/issue/409
[#409] Loop will exit if delta component is matched.
|
2021-10-27 12:53:10 -04:00 |
|
Cyrus
|
b0835d1cf5
|
Changed the compare to the hash value for the file instead of the filename.
|
2021-10-27 08:58:51 -04:00 |
|
iadgovuser29
|
647c88d16b
|
[#409] Fixed one problem with delta component checking.
|
2021-10-26 15:53:05 -04:00 |
|