Commit Graph

1384 Commits

Author SHA1 Message Date
iadgovuser58
422834a8bb spdm event structures 2024-07-26 10:59:22 -04:00
iadgovuser58
c17221c6df added files for EvEfiSpdmFirmwareBlob 2024-07-26 10:59:22 -04:00
iadgovuser62
7609759356 Adding system test for provision using Provisioner.NET (#748)
* Adding run script, Dockerfile, and container setup script for provisioning with TPM Simulator and Provisioner.Net

* Replacing Docker container setup script with Docker Compose .yml file with respective configurations in related files

* Adding system_test.yml for GitHub actions to run system tests upon V3 branch pushes. Modifying related files accordingly

* Replacing V2 ACA with V3 ACA built from Rocky 9
2024-07-26 10:59:22 -04:00
CAFB385655BEB1060E85B6C080B432F8EB2A2AF78459BD6532124977B933154A
b3ad23176b Format certificate dates in UTC (#763) 2024-07-26 10:59:22 -04:00
iadgovuser58
939240d284 fixed issue caused by change to version method 2024-07-26 10:59:22 -04:00
CAFB385655BEB1060E85B6C080B432F8EB2A2AF78459BD6532124977B933154A
80ba36cbf2 Create IDevID certificate page (#727)
Adding IDevID certificate page and parsing support
2024-07-26 10:59:22 -04:00
iadgovuser59
55629a704e Minor whitespace and newline character fixes 2024-07-26 10:59:22 -04:00
iadgovuser59
52053e0f3a Adding GZIP compression to Tomcat server 2024-07-26 10:59:22 -04:00
iadgovuser26
ea56a71ed7 Modified mariadb config for Rocky 8 2024-07-26 10:59:22 -04:00
iadgovuser26
c4ea3709ea updated file permissions for Rocky 9 2024-07-26 10:59:22 -04:00
iadgovuser26
b44232a1a4 Added the hirs-aca service 2024-07-26 10:59:22 -04:00
5B96790E3664F40075A67E6ADF737EDB15B4408DBC91A81228B31537B0CE3E26
d12e74c2a8 Update WiX 3.14.1 (#743) 2024-07-26 10:59:22 -04:00
iadgovuser29
16ec54a59b ACA dockerfile updated ref to package/linux 2024-07-26 10:59:22 -04:00
chubtub
b6f36f75b0 WIP: instantiate EC or RSA-specific objects depending on credential algorithm 2024-03-18 15:02:19 -04:00
chubtub
36331ed4aa WIP: add support for EC private keys 2024-03-18 15:02:19 -04:00
chubtub
3ac30cfc5d
Merge pull request #728 from nsacyber/v3_issue-726
[#726] Verify base RIM signature against truststore using public signing cert
2024-03-18 14:58:38 -04:00
Cyrus
35ccce2e68
Merge pull request #733 from nsacyber/v3_issue-ignore-revision
[#707 #705] Delta Component compare part 2 and Policy Addition
2024-03-15 19:41:38 -04:00
chubtub
fab56eb0e9 Remove commented lines 2024-03-15 14:37:09 -04:00
iadgovuser26
442bf93419
Merge pull request #713 from nsacyber/v3_issue_687
[#687] Fixed mariadb service stop with ACA RPM install
2024-03-14 17:17:43 -04:00
iadgovuser26
8e1ec11c41 fixed merge conflict 2024-03-14 15:57:56 -04:00
Cyrus
750bf8d3d2 Another small change to line up provisioner certificate vs upload
certificate
2024-03-14 15:38:46 -04:00
iadgovuser26
5672aa5a1d fixed permission issue with mariadb.log 2024-03-14 14:48:14 -04:00
Cyrus
cf08b1d2d3 Another minor change, didn't update the delta message for components and
add the restore function to the upload
2024-03-14 10:41:45 -04:00
Cyrus
350cf2b802 These are some minor updates while investigating a bug. 2024-03-14 10:12:40 -04:00
Cyrus
6a13d8dbb1 The if statement that uses the new ignore policy was improperly
implemented.  Updated so that any non-revision attribute will save
2024-03-13 20:18:39 -04:00
Cyrus
a9e403d1a0 This set of code fixes a null pointer. The ignore flag was not set up
properly and the setter for the attribute name for the result wasn't set
2024-03-13 14:57:41 -04:00
iadgovuser26
2b7fee432a Fixed selinux issue for Rocky 9 and Mysql restart for Ubuntu install 2024-03-13 13:49:42 -04:00
Cyrus
c560ad5997 Updated code to handle modified non specific serial number component 2024-03-12 11:08:29 -04:00
Cyrus
59998cb898 This is a merging of component red highlighting with the new policy to
ignore the revision attribute.
2024-03-12 08:10:51 -04:00
Cyrus
d6d47d9abe This last push updates unit tests that are not prepped to handle the new
code.
2024-03-07 16:11:24 -05:00
Cyrus
37850a6c90 Removed a statement that I'll need to put back in 2024-03-07 15:07:32 -05:00
chubtub
1947b70a1b Clean up javadocs; change System.out.println to log messages 2024-03-07 00:43:10 -05:00
5B96790E3664F40075A67E6ADF737EDB15B4408DBC91A81228B31537B0CE3E26
24d81b9da2
create_aca_images workflow passes branch ref to dockerfiles (#729)
* Update ACA image workflow to pass ref to dockerfiles [no ci]

* Use GITHUB_REF_NAME instead [no ci]

* Change variable usage [no ci]

* Use build arg instead of env [no ci]
2024-03-06 20:51:13 -05:00
Cyrus
70ca2ced7b This is a continuation of the PR for 723 and issue 705. These changes
set up fixing the delta part of the provisioning of the attributes.
2024-03-06 15:16:05 -05:00
chubtub
54f3e4bfca Modify swidtag validation to use the public signing cert to verify <KeyName> in a signature and the truststore 2024-03-06 12:40:54 -05:00
chubtub
d83c34f4ad Create VerifyArgumentValidator 2024-03-06 12:40:54 -05:00
chubtub
6b76d873e6 Upgrade JCommander to support global argument validation. Replace CredentialArgumentValidator with CreateArgumentValidator. 2024-03-06 12:40:54 -05:00
chubtub
5445278723
Merge pull request #715 from nsacyber/v3_issue-661_updated
[#661] Output handling should be more concise
2024-03-06 12:40:03 -05:00
Cyrus
ac093d3ecf
Merge pull request #725 from nsacyber/v3_issue-723
[#723] Update Provisioning for Version value
2024-03-06 11:37:46 -05:00
Cyrus
eada242284 These changes have been moved over from updates made for issue-705. The
primary function implemented in this set of changes is to track more
specifically what failed when the components of a certificate are
compared.  The implementation required a couple of new DB classes to be
created to store this information.  This is also to set up a better
visual comparison of what was expected vs what was actually found.  This
is similar to the RIM event compare failure page.
2024-03-01 15:29:10 -05:00
iadgovuser26
ae1167b3f5 updated container check 2024-03-01 12:04:26 -05:00
Cyrus
21111c1291 A message is now printed indicating in the log that the platform version
check is skipped if the information is not specified, unknown or null.
2024-02-29 11:26:10 -05:00
chubtub
74ab262bc0 Revert "Parse the signing cert authority key identifier during signing and place in <KeyName>"
This reverts commit 63e184f9a3.
2024-02-29 10:43:11 -05:00
Cyrus
300cae3950 Changed the branch naming and addressed a failed unit test. When the
value of the platform version is null, the unit test was failing.
2024-02-29 07:53:21 -05:00
Cyrus
039054b740 Updating the code to ignore 'Not Specified' and 'Unknown' as values for
Platform Version.
2024-02-28 16:25:15 -05:00
D2B8CA1B27286366A8607B6858C0565962613D18D0546480078B520CD7AD705A
60dfb21c62
Merge pull request #720 from nsacyber/v3_issue_680-unittest
Migrated 1 unit test from master Utils to main HIRS_AttestationCA
2024-02-28 08:55:36 -05:00
iadgovuser26 iadgovuser26@empire.eclipse.ncsc.mil
835111619a updated selinux context for mariadb files on rocky and fedora 2024-02-28 08:53:49 -05:00
iadgovuser58
9c8d936e51 fixing checkstyles 2024-02-27 16:38:04 -05:00
iadgovuser58
7efbcc270e checkstyles cleanup 2024-02-26 17:56:58 -05:00
iadgovuser58
aad508fdb9 removing unit test dependency on other unit test; comments cleanup 2024-02-26 10:03:09 -05:00