Cyrus
|
69cd06df3b
|
Merging error didn't include the update to Assert.State
|
2021-02-09 06:54:31 -05:00 |
|
Cyrus
|
5e4dc8ce82
|
Merge branch 'master' into Unmatched-component-refactor
|
2021-02-08 15:23:21 -05:00 |
|
Cyrus
|
7b79ceb07a
|
Found the issue with the component being removed that doesn't have a proper serial number and adding one with it. The code was revalidating the base in the attributes enabled flag. This was unncessary.
|
2021-02-08 14:25:10 -05:00 |
|
Cyrus
|
4999c96685
|
Updated code to correct situations that were not linking up with properly for delta and platform certificate component validation.
|
2021-02-05 16:10:15 -05:00 |
|
Cyrus
|
677716fa08
|
Merge branch 'master' into Unmatched-component-refactor
|
2021-02-04 08:51:31 -05:00 |
|
Cyrus
|
447c817839
|
Updated the lists for the left over components.
|
2021-02-02 12:57:55 -05:00 |
|
Cyrus
|
2d9bbe1bd7
|
initial commit
|
2021-02-01 11:24:20 -05:00 |
|
Cyrus
|
8d6a697a23
|
Removed some unnecessary comments
|
2021-01-28 08:08:12 -05:00 |
|
Cyrus
|
653bfddc6d
|
Updated some code and took out things that didin't need to be in the official build for unit tests
|
2021-01-21 07:40:55 -05:00 |
|
Cyrus
|
5589096443
|
Cleaned up some stuff I found during code compare in github.
|
2021-01-20 13:23:51 -05:00 |
|
Cyrus
|
acc022d784
|
Finalized clean up.
|
2021-01-20 13:05:43 -05:00 |
|
Cyrus
|
e9eef0e5b3
|
Updated the code to go through the serial numbers that are valid numbers verus generic filler. Tested against the provisioner.
|
2021-01-20 08:00:24 -05:00 |
|
Cyrus
|
fa12614221
|
Testing out new code
|
2021-01-14 10:34:27 -05:00 |
|
Cyrus
|
beb1ccbee3
|
Updated a supply chain validation check for delta certificates. Updated the check for duplicate base platform certificates when storing them for the same device and updated the begin validity date for the delta vs the base check.
|
2021-01-12 12:26:54 -05:00 |
|
Cyrus
|
fcb496686c
|
This includes some refactoring of the component identifier.
|
2021-01-11 13:24:49 -05:00 |
|
Cyrus
|
7028810707
|
This latest push should have the code that'll highlight the components based on a string rather than the serial number. This also adds additional checks for the validity begin date of the delta not matching or being before the base. It also checks that they don't have the same certificate serial number.
|
2020-12-30 08:41:47 -05:00 |
|
Cyrus
|
1db52cebf9
|
This is a stopping point because the code can't be fully worked out because the data (certificates) aren't correct.
|
2020-12-17 07:24:51 -05:00 |
|
Cyrus
|
8fa5dfdd9e
|
Removed unused imports
|
2020-12-14 10:57:35 -05:00 |
|
Cyrus
|
62c7ca2d90
|
This PR is to address issue #308. The ACA was pulling Issuer Certificates using the organization RDN of the subject string and getting this from the issuer string of the EC or PC. This presents a problem because it isn't a required field. The organization field cannot be null or empty. Pulling objects from a DB using null or empty would produce bad results. The main change of this issue (which has not been full tested) is pulling using the AKI for the db lookup. If this fails, instead of falling back on potentially left out fields like the O= RDN, the ACA takes the issuer/subject fields, breaks them apart and sorts them based on the key. It also changes the case. This way the lookup can be assured to match in case of some random situation in which the issuer or subject field don't match because RDN keys are just in different positions of the string.
|
2020-12-11 14:47:46 -05:00 |
|
Cyrus
|
e32e9412d8
|
Merge branch 'master' into Unmatched-component-refactor
|
2020-12-03 13:20:12 -05:00 |
|
Cyrus
|
a32d3a5f02
|
Remove comments
|
2020-12-01 09:46:05 -05:00 |
|
Cyrus
|
29b7d466cd
|
Updated wording in validation for failed trust store
|
2020-11-30 09:23:10 -05:00 |
|
Cyrus
|
9433c97dc9
|
The code now uses a combination of the class value and the platform manufacturer and model to identify mismatches. This now highlights the failured components
|
2020-11-25 08:02:45 -05:00 |
|
Cyrus
|
ffbcebbf11
|
Found the issue with the isMatch class not working. The component class string for the class value has a pound sign.
|
2020-11-24 09:12:00 -05:00 |
|
Cyrus
|
fbdcf83840
|
Continued refactoring to update the failed components part of the attribute validation. The delta mapping needs to be reworked to not use serials.
|
2020-11-23 14:46:29 -05:00 |
|
Cyrus
|
2b41720ded
|
Merge branch 'master' into update-component-failure-highlight
|
2020-11-17 15:24:27 -05:00 |
|
chubtub
|
e3b5d164a3
|
Add SKI to front end. Extract PK from base RIM to validate signature if not found in db
|
2020-11-16 16:43:11 -08:00 |
|
Cyrus
|
e8f5107137
|
Updating code to use a different format for identifying failed components.
|
2020-11-09 13:59:19 -05:00 |
|
Cyrus
|
bdb32d13ad
|
initial commit
|
2020-11-09 12:45:36 -05:00 |
|
Cyrus
|
9aa2c6a46d
|
Merge branch 'master' into client-display-log-mismatch
|
2020-11-06 09:17:38 -05:00 |
|
chubtub
|
623da2ce80
|
Overload RIM validator class for faster signature checking
|
2020-11-05 14:13:50 -05:00 |
|
Cyrus
|
c7ffb1c57d
|
Merge branch 'master' into client-display-log-mismatch
|
2020-11-05 12:39:35 -05:00 |
|
chubtub
|
302ffd81ee
|
Load Schema object in ReferenceManifestValidator class with controller class instantiation to save time
|
2020-11-05 11:07:17 -05:00 |
|
chubtub
|
24cf71642d
|
Add validation for support RIM hash and base RIM signature.
|
2020-11-05 11:07:17 -05:00 |
|
Cyrus
|
1b3abe465a
|
Merge pull request #303 from nsacyber/vendor-table-refactor
[#302] UEFI Table Map Refactor
|
2020-11-05 11:02:18 -05:00 |
|
Cyrus
|
49714fb3f2
|
Updated the Component Class Registry to rev. 4
|
2020-11-04 07:44:07 -05:00 |
|
Cyrus
|
1a86012e72
|
Merge branch 'master' into vendor-table-refactor
|
2020-10-27 13:05:48 -04:00 |
|
Cyrus
|
24e460e0c4
|
This is a refactore that changes BiosMeasurements into EventLogMeasurements for evolving naming convention updates.
|
2020-10-26 11:09:26 -04:00 |
|
Cyrus
|
d7ade70b5c
|
This branch takes the validated status of a failed event log matching from the bios measurements on the client and displays what failed on the support RIM page and the fail validation icon, if log mismatch, links to a bios measurments page that displays the events that didn't match next to baseline.
|
2020-10-22 13:32:30 -04:00 |
|
Cyrus
|
51f91b759d
|
Merge branch 'master' into vendor-table-refactor
|
2020-10-20 09:40:32 -04:00 |
|
Cyrus
|
96970142cb
|
This commit includes a completed rewrite of the ReferenceManifestSelector framework. Like the previous rewrite, it was easier and made more sense to create addition classes ands that are specific to a type of RIM (base, support, measurement) for referencing in the DB. Once this was rewritten the code was modified to validate the measurement against the support rim.
|
2020-10-19 13:06:44 -04:00 |
|
Cyrus
|
6052d8f8f2
|
The current script for generating the xjc didn't check if the files already existed. This causes the script to run multiple times during a build, which slows down the build process. This tweak checks the location to see if it exists and skips generating the xjc again.
|
2020-10-14 10:49:14 -04:00 |
|
Cyrus
|
9d793f50e6
|
Merge pull request #305 from nsacyber/client-eventlog
[#238] Client eventlog upload
|
2020-10-14 10:46:37 -04:00 |
|
Cyrus
|
e902c89a19
|
Merge pull request #304 from nsacyber/xjc-library-test
Updated XJC implementation/integration
|
2020-10-14 09:56:34 -04:00 |
|
Cyrus
|
4b0bb2df91
|
This commit updates the provisioner to pull the rim and swidtag locations from a properties file that will be created during the post install process. The provisioner then pulls the values and sends them to the ACA. The ACA currently just prints out the content and saves the swidtag.
|
2020-10-09 10:48:17 -04:00 |
|
Cyrus
|
369ce81c21
|
Merge branch 'master' into vendor-table-refactor
|
2020-10-06 09:45:12 -04:00 |
|
Cyrus
|
17728d3019
|
Updated the error message for no associated RIM not found, cleaned up display of the event content and adjusted the column of the digest display.
|
2020-10-06 07:42:15 -04:00 |
|
Cyrus
|
653acd270e
|
With the changes to how the ReferenceManifest is represented in the code and the previous firmware validation PR update, this branch wasn't properly updated for quote validation. The code was still pulling information for the baseline from an old source that wouldn't work anymore. Therefore all validations for the quote failed. The update now pulls the baseline information from the support RIM which is now stored in the database.
|
2020-10-01 12:14:29 -04:00 |
|
Cyrus
|
e97e17b534
|
This is a change to exclude the jaxb generated files from the git tracked file list just like the protobuf class is. The script runs and generates, the files are ignored by pmd and compile depends on building the xjc directory successfully.
|
2020-10-01 08:36:59 -04:00 |
|
Cyrus
|
35dcc226a6
|
Updated and fixed the difference in the code from the master branch merge
|
2020-09-30 11:33:28 -04:00 |
|