Commit Graph

300 Commits

Author SHA1 Message Date
5f3be5915b Added the AppraisalStatus message for a failure tagged into a Platform
Certificate.  It will display on the details page as a tool tip on a red
component.  However it is not refined. [no ci]
2023-03-30 20:21:49 -04:00
dad4a2e02c addessed checkstyle errors 2022-08-02 17:29:00 -04:00
9e90356c25 addessed checkstyle errors 2022-08-02 17:03:53 -04:00
96354113a5 addessed checkstyle errors 2022-08-02 13:52:22 -04:00
505f62ce39 added sha384 processing for event logs 2022-08-02 11:52:05 -04:00
8b365bed34 This is a re-creation of tls-settings-update #366 2022-04-14 06:35:49 -04:00
2e26823fc1 Did some testing on manual/curl uploading. This produced an error
because device name was being used to pull objects in the validation
quote part of the provision.  This was changed.  The event log is
deleted each time so that only one event log per device is maintained.
2022-03-21 09:51:32 -04:00
d4c35e09ab Updated the code to correctly include the supplemental digestvalues in
the firmware validation.
2022-03-16 09:06:04 -04:00
f19916c454 Merge pull request #444 from nsacyber/ski-prefix-truncate
Truncate 4 bytes from SKI
2022-02-24 16:48:06 -05:00
2e0b83f4fe Updated the upload function for support RIM. The store happened before
the linkage and nothing was being saved.
2022-02-24 09:54:59 -05:00
f28daa9144 Found another issue using the SKID that isn't matching up 2022-02-23 15:44:45 -05:00
a1ebd2f962 Fixed null pointer found in git actions` 2022-02-23 10:13:20 -05:00
4cf08ef38a Updated unit tests and removed magic number 2022-02-23 08:45:16 -05:00
00d8dfb3b5 Updated the CA certificate to truncate the prefix of the subject key identifier 2022-02-23 07:53:07 -05:00
9d27923d6d Added null checks for a unit test 2022-02-18 13:52:14 -05:00
bf989bbee7 Merge branch 'issue-395' of github.com:nsacyber/HIRS into issue-395 2022-02-17 16:55:59 -05:00
96200f57c2 Revert "Decode the event content for display on the frontend."
This reverts commit 2671a572ba.
2022-02-17 16:51:44 -05:00
1cbe50b401 Decode the event content for display on the frontend. 2022-02-17 16:51:44 -05:00
d02be16ced The event selector was removed. It was not needed, but the event
manager was modified to pull the right data.
2022-02-17 16:49:08 -05:00
aabeb4e37f Updated code allows the tpm event table to be searched and information
updated when the swidtag is added.
2022-02-17 16:49:06 -05:00
470e6eccdf Refactored the Reference Digest code so that the ReferenceDigestValue
table is accessible and upated the contoller for the getOrderedList.
2022-02-17 16:48:08 -05:00
10915bdc3b Prelminary changes to remove ReferenceDigestRecord as a database object. 2022-02-17 13:11:41 -05:00
ddada80add WIP: frontend hangs while getting records from backend 2022-02-17 13:08:07 -05:00
7d8df398e7 Controller class for returning TPM Event data to jsp 2022-02-17 13:08:06 -05:00
1d57ab0d09 Revert "Decode the event content for display on the frontend."
This reverts commit 2671a572ba.
2022-02-16 11:17:25 -05:00
2671a572ba Decode the event content for display on the frontend. 2022-02-14 17:24:33 -05:00
fc3f59adce Updated RIM lookup to use manufacturer and model instead of deviceName 2022-02-11 09:09:39 -05:00
2db5b86da1 Some minor updates. Fixed a null pointer exception in the
SupplyChainValidationServiceImpl.  Updated warnings when files are
missing from the device claim
2022-02-11 07:32:07 -05:00
13e8074e88 Updated the database size of the bytes field in the ReferenceManifest
table.
2022-02-09 07:35:46 -05:00
c5e3823acd The event selector was removed. It was not needed, but the event
manager was modified to pull the right data.
2022-02-02 09:28:35 -05:00
035efad9d2 Updated code allows the tpm event table to be searched and information
updated when the swidtag is added.
2022-01-31 14:11:36 -05:00
c4b6aca667 Merge branch 'issue-395' of github.com:nsacyber/HIRS into issue-395 2022-01-24 14:35:01 -05:00
f503457bd4 Refactored the Reference Digest code so that the ReferenceDigestValue
table is accessible and upated the contoller for the getOrderedList.
2022-01-21 06:29:53 -05:00
6d8392da45 Prelminary changes to remove ReferenceDigestRecord as a database object. 2022-01-11 10:02:38 -05:00
fc7d8b5dd1 Merge branch 'master' into issue-395 2022-01-07 09:36:50 -05:00
a71e7130ab WIP: frontend hangs while getting records from backend 2022-01-04 11:07:18 -05:00
bf8ef387c1 Merge pull request #407 from nsacyber/issue-381
[#381] Update RIM validation in ACA
2021-12-16 10:39:58 -05:00
da9c8469ba Re-creating the componentidentifer here lost important information. 2021-12-10 20:58:44 -05:00
e22d95c2e6 Modified so PCI ID translation will highlight delta certs and show in Tooltips 2021-12-10 09:07:28 -05:00
9b790cb805 checking for class cast now. Highlighting appears. 2021-12-03 17:01:18 -05:00
6337367ba9 Added Pci IDs translate to the HIRS_Util module for the supply chain validator process so that the hash can match up for highlighting failed components. 2021-12-03 16:01:04 -05:00
95c5e40f89 Utilize protobuf to parse claim response. Work on array handling on ACA. 2021-11-23 22:01:16 -05:00
483099a273 Updated the policy code to modify the measurement array length and ignore PCR 10 as well. 2021-11-23 10:06:21 -05:00
4c46758d9a This commit is a feature update. The IMA PCR enable/diable is being enhanced to update the mask the provisioner uses to pull the quote from the TPM. This code will send down a string range of PCR values that excludes PCR 10. The quote that is returned should be a composite without the PCR 10. There will be a log statement in this commit that should be removed. 2021-11-23 09:36:00 -05:00
1eca360a4d Modify log messages so that validation failures from certs in the keystore that are not actually in the chain do not raise undue attention 2021-11-19 01:50:05 -05:00
3f091a3827 Merge pull request #415 from nsacyber/issue/414
[#414] Handle MODIFIED component without serial number
2021-11-18 08:54:09 -05:00
23a086c925 Merge branch 'issue-381' of github.com:nsacyber/HIRS into issue-381 2021-11-17 10:06:58 -05:00
d5fcd06902 Add error handling to clarify endorsement validation error 2021-11-16 16:59:56 -05:00
d31b710824 This is a test run to ignore endorsement credential verification during firmware testing. 2021-11-12 14:24:33 -05:00
c944aab335 Added a log statement to get more information about the certificate that is failing signature verification. 2021-11-12 11:31:00 -05:00