Commit Graph

724 Commits

Author SHA1 Message Date
da502fbf42 ci system test refactor 2021-11-16 17:11:40 -05:00
d5fcd06902 Add error handling to clarify endorsement validation error 2021-11-16 16:59:56 -05:00
f939604822 updated docker login 2021-11-16 16:57:44 -05:00
09d71ddc18 initial ci system test refactor 2021-11-16 16:51:42 -05:00
cfb9cb7535 Uncommented the code that deals with the signing certificate. 2021-11-15 09:43:31 -05:00
d31b710824 This is a test run to ignore endorsement credential verification during firmware testing. 2021-11-12 14:24:33 -05:00
c944aab335 Added a log statement to get more information about the certificate that is failing signature verification. 2021-11-12 11:31:00 -05:00
064dab89c8 Change from com.eclipsesource.json package to javax.json for parsing 2021-11-10 12:59:13 -05:00
d183504a3f Merge branch 'master' into issue-381 2021-11-10 10:08:42 -05:00
0934b3106f Merge pull request #420 from nsacyber/base-rim-link-fix
RimLinkHash Fix
2021-11-10 10:06:11 -05:00
70d92c4b38 Merge pull request #417 from nsacyber/issue-404
[#404] PXE Policy options
2021-11-10 10:05:52 -05:00
04b050de15 The rimlinkhash meta information wasn't linking up with the associated swidtag. This is because the wrong hash look up was being used. Previously when the hexDecHash and base64Hash were implemented, the main focus was on the rimel and not the swidtag. 2021-11-10 09:50:17 -05:00
2d9fb19d38 Updated the new polices after doing a bit of testing to make sure that they do ignore when there is a failure on that specific bit. 2021-11-10 07:27:33 -05:00
2547cb6cce This initial commit updates the location of the vendor-table.json which is used by the ACA and the eventlog tool. The previous change moved the vendor-table.json to a separate folder, however the code was not updated to reflect the change. This instead updates how the two install handle the file. The ACA was updated not to clobber the file if it exists and the eventlog tool was updated to do the same through an additional script called post install. 2021-11-09 08:32:04 -05:00
e0a1e53d93 Handle an exception thrown when the provisioner fails to send RIM files to the ACA 2021-11-08 14:51:38 -05:00
0c233ae771 Set signature validity so that the ACA can report accurately 2021-11-08 14:51:38 -05:00
3a6be133eb Checkstyle changes 2021-11-08 14:51:38 -05:00
bc7e07583f Match only the actual extension bytes of the SKID 2021-11-08 14:51:38 -05:00
962ca45bb7 Modify ACA RIM validation to search for a signing cert if the base RIM does not have an embedded cert. Validate the ca chain of the found signing cert. 2021-11-08 14:46:04 -05:00
f0ea84d199 I added code to do different masks on the pcr selection, but that was not needed. So I just uncommented the one section of ignore not being used. 2021-11-05 16:11:28 -04:00
7bb9d8698d Merge pull request #408 from nsacyber/support-rim-filename-correction
Support RIM Filename Fix
2021-11-05 08:57:06 -04:00
bd5d905990 Updated the code to include bulk downloads for issued, eks. 2021-11-04 15:55:55 -04:00
e82de12341 Updated the ignore OS events check with the last rule for #404 2021-11-01 09:35:36 -04:00
fe617ea948 Updated the policy code to ignore based on the TPM Log Event. Added in the code for OS Events. 2021-10-29 20:24:46 -04:00
2b7b4bfdd1 Updated the labeling for the Trust chain and platform certificates. The import label is removed and the download icon moved next to the import button. Added the same functionality to the RIMs. 2021-10-29 15:42:57 -04:00
aae6845730 Initial Commit. This adds the visual object to the policy page. 2021-10-29 14:55:23 -04:00
4403a98b3b [#414] Handle MODIFIED component without serial number 2021-10-29 09:02:56 -04:00
5434fe8ca7 Merge pull request #412 from nsacyber/issue/411
[#411] Changed assumption regarding Delta cert components with ADDED status
2021-10-28 10:02:05 -04:00
04a66da5f3 Merge pull request #413 from nsacyber/cpp-compiler-warning-fix
Cpp Compiler Warning fixes
2021-10-27 16:12:36 -04:00
79127e57d1 Initi commit. There are warning that newer compilers are throwing for vector.at and vector.size. These are removed. In addition a char** in a main parameter was made into a const. 2021-10-27 14:55:50 -04:00
867833dc9d [#411] Changed assumption regarding Delta cert components with ADDED status. 2021-10-27 14:14:09 -04:00
cf97b15b13 Merge pull request #410 from nsacyber/issue/409
[#409] Loop will exit if delta component is matched.
2021-10-27 12:53:10 -04:00
b0835d1cf5 Changed the compare to the hash value for the file instead of the filename. 2021-10-27 08:58:51 -04:00
647c88d16b [#409] Fixed one problem with delta component checking. 2021-10-26 15:53:05 -04:00
bb6ec6cc4b The rim hash validation icon is coming up red when both base and support RIMs are loaded. This fixes that issue. 2021-10-26 11:09:36 -04:00
3f9c6c9d44 Merge pull request #406 from nsacyber/global-var-change
[#402] pcrValues global variable change
2021-10-20 18:15:56 -04:00
124752c72d Merge pull request #403 from nsacyber/rim-lookup-fix
Supplemental RIM Hash Fix
2021-10-20 18:15:43 -04:00
c77ad68c08 The variable pcrValues in Abstract Attestation CA class didn't need to be global, this was removed and set to a local variable with an empty string. 2021-10-20 14:29:53 -04:00
8b25ae698a Merge pull request #402 from nsacyber/issue/uriref-algorithmidentifier-parsing
[#401] Changed instanceof check and error message.
2021-10-19 14:32:02 -04:00
8f2290300e The wrong hash was use for the look up 2021-10-18 09:53:59 -04:00
e8085aae0f [#401] Changed instanceof check and error message. 2021-10-17 21:51:29 -04:00
e5470eded5 Merge pull request #400 from nsacyber/tpm-version-fix
CPP Compiler fix
2021-10-14 17:43:11 -04:00
ff56d83443 A compiler error was happening with an uninitialized float variable. 2021-10-14 13:58:59 -04:00
9492c680da There was an checkstyles error that needed to be corrected. 2021-10-12 08:41:45 -04:00
ee7befca81 This initial commit adds the ability to download all platform credentials and trust chain credentials from their respective pages in a bulk zip. 2021-10-08 16:35:40 -04:00
e8b320e203 Merge pull request #397 from nsacyber/issued-certificates-update
[#396] DevID display update
2021-10-04 14:38:04 -04:00
e51f01d52e Changed DevID to LDevID on the policy page and removed the Attestation reference for LDevID 2021-10-04 10:37:02 -04:00
f8a3ccd962 This is an initial commit updates the policy page. Adds additional policies for generating a DevID. The underlying code doesn't actually generate one yet. But the SupplyChainPolicy holds the flags. 2021-09-17 07:55:44 -04:00
aa45391cc3 run individual unit tests 2021-09-02 15:18:20 -04:00
18a8723219 separate out tcg_rim_tool tests 2021-09-02 10:45:07 -04:00