Commit Graph

728 Commits

Author SHA1 Message Date
chubtub
893c1db804
Merge pull request #416 from nsacyber/support-file-revision
Vendor Table JSON refactor
2021-11-17 10:55:31 -05:00
chubtub
8b5027de4c Modify log messages so that validation failures from certs in the keystore that are not actually in the chain do not raise undue attention 2021-11-17 10:15:31 -05:00
chubtub
23a086c925 Merge branch 'issue-381' of github.com:nsacyber/HIRS into issue-381 2021-11-17 10:06:58 -05:00
lareine
f74c5f72e7 System test failure 2021-11-17 09:20:07 -05:00
lareine
da502fbf42 ci system test refactor 2021-11-16 17:11:40 -05:00
chubtub
d5fcd06902 Add error handling to clarify endorsement validation error 2021-11-16 16:59:56 -05:00
lareine
f939604822 updated docker login 2021-11-16 16:57:44 -05:00
lareine
09d71ddc18 initial ci system test refactor 2021-11-16 16:51:42 -05:00
Cyrus
cfb9cb7535 Uncommented the code that deals with the signing certificate. 2021-11-15 09:43:31 -05:00
Cyrus
d31b710824 This is a test run to ignore endorsement credential verification during firmware testing. 2021-11-12 14:24:33 -05:00
Cyrus
c944aab335 Added a log statement to get more information about the certificate that is failing signature verification. 2021-11-12 11:31:00 -05:00
chubtub
064dab89c8 Change from com.eclipsesource.json package to javax.json for parsing 2021-11-10 12:59:13 -05:00
chubtub
d183504a3f Merge branch 'master' into issue-381 2021-11-10 10:08:42 -05:00
Cyrus
0934b3106f
Merge pull request #420 from nsacyber/base-rim-link-fix
RimLinkHash Fix
2021-11-10 10:06:11 -05:00
Cyrus
70d92c4b38
Merge pull request #417 from nsacyber/issue-404
[#404] PXE Policy options
2021-11-10 10:05:52 -05:00
Cyrus
04b050de15 The rimlinkhash meta information wasn't linking up with the associated swidtag. This is because the wrong hash look up was being used. Previously when the hexDecHash and base64Hash were implemented, the main focus was on the rimel and not the swidtag. 2021-11-10 09:50:17 -05:00
Cyrus
2d9fb19d38 Updated the new polices after doing a bit of testing to make sure that they do ignore when there is a failure on that specific bit. 2021-11-10 07:27:33 -05:00
Cyrus
2547cb6cce This initial commit updates the location of the vendor-table.json which is used by the ACA and the eventlog tool. The previous change moved the vendor-table.json to a separate folder, however the code was not updated to reflect the change. This instead updates how the two install handle the file. The ACA was updated not to clobber the file if it exists and the eventlog tool was updated to do the same through an additional script called post install. 2021-11-09 08:32:04 -05:00
chubtub
e0a1e53d93 Handle an exception thrown when the provisioner fails to send RIM files to the ACA 2021-11-08 14:51:38 -05:00
chubtub
0c233ae771 Set signature validity so that the ACA can report accurately 2021-11-08 14:51:38 -05:00
chubtub
3a6be133eb Checkstyle changes 2021-11-08 14:51:38 -05:00
chubtub
bc7e07583f Match only the actual extension bytes of the SKID 2021-11-08 14:51:38 -05:00
chubtub
962ca45bb7 Modify ACA RIM validation to search for a signing cert if the base RIM does not have an embedded cert. Validate the ca chain of the found signing cert. 2021-11-08 14:46:04 -05:00
Cyrus
f0ea84d199 I added code to do different masks on the pcr selection, but that was not needed. So I just uncommented the one section of ignore not being used. 2021-11-05 16:11:28 -04:00
chubtub
7bb9d8698d
Merge pull request #408 from nsacyber/support-rim-filename-correction
Support RIM Filename Fix
2021-11-05 08:57:06 -04:00
Cyrus
bd5d905990 Updated the code to include bulk downloads for issued, eks. 2021-11-04 15:55:55 -04:00
Cyrus
e82de12341 Updated the ignore OS events check with the last rule for #404 2021-11-01 09:35:36 -04:00
Cyrus
fe617ea948 Updated the policy code to ignore based on the TPM Log Event. Added in the code for OS Events. 2021-10-29 20:24:46 -04:00
Cyrus
2b7b4bfdd1 Updated the labeling for the Trust chain and platform certificates. The import label is removed and the download icon moved next to the import button. Added the same functionality to the RIMs. 2021-10-29 15:42:57 -04:00
Cyrus
aae6845730 Initial Commit. This adds the visual object to the policy page. 2021-10-29 14:55:23 -04:00
iadgovuser29
4403a98b3b [#414] Handle MODIFIED component without serial number 2021-10-29 09:02:56 -04:00
iadgovuser26
5434fe8ca7
Merge pull request #412 from nsacyber/issue/411
[#411] Changed assumption regarding Delta cert components with ADDED status
2021-10-28 10:02:05 -04:00
Cyrus
04a66da5f3
Merge pull request #413 from nsacyber/cpp-compiler-warning-fix
Cpp Compiler Warning fixes
2021-10-27 16:12:36 -04:00
Cyrus
79127e57d1 Initi commit. There are warning that newer compilers are throwing for vector.at and vector.size. These are removed. In addition a char** in a main parameter was made into a const. 2021-10-27 14:55:50 -04:00
iadgovuser29
867833dc9d [#411] Changed assumption regarding Delta cert components with ADDED status. 2021-10-27 14:14:09 -04:00
iadgovuser26
cf97b15b13
Merge pull request #410 from nsacyber/issue/409
[#409] Loop will exit if delta component is matched.
2021-10-27 12:53:10 -04:00
Cyrus
b0835d1cf5 Changed the compare to the hash value for the file instead of the filename. 2021-10-27 08:58:51 -04:00
iadgovuser29
647c88d16b [#409] Fixed one problem with delta component checking. 2021-10-26 15:53:05 -04:00
Cyrus
bb6ec6cc4b The rim hash validation icon is coming up red when both base and support RIMs are loaded. This fixes that issue. 2021-10-26 11:09:36 -04:00
iadgovuser26
3f9c6c9d44
Merge pull request #406 from nsacyber/global-var-change
[#402] pcrValues global variable change
2021-10-20 18:15:56 -04:00
iadgovuser26
124752c72d
Merge pull request #403 from nsacyber/rim-lookup-fix
Supplemental RIM Hash Fix
2021-10-20 18:15:43 -04:00
Cyrus
c77ad68c08 The variable pcrValues in Abstract Attestation CA class didn't need to be global, this was removed and set to a local variable with an empty string. 2021-10-20 14:29:53 -04:00
iadgovuser26
8b25ae698a
Merge pull request #402 from nsacyber/issue/uriref-algorithmidentifier-parsing
[#401] Changed instanceof check and error message.
2021-10-19 14:32:02 -04:00
Cyrus
8f2290300e The wrong hash was use for the look up 2021-10-18 09:53:59 -04:00
iadgovuser29
e8085aae0f [#401] Changed instanceof check and error message. 2021-10-17 21:51:29 -04:00
Cyrus
e5470eded5
Merge pull request #400 from nsacyber/tpm-version-fix
CPP Compiler fix
2021-10-14 17:43:11 -04:00
Cyrus
ff56d83443 A compiler error was happening with an uninitialized float variable. 2021-10-14 13:58:59 -04:00
Cyrus
9492c680da There was an checkstyles error that needed to be corrected. 2021-10-12 08:41:45 -04:00
Cyrus
ee7befca81 This initial commit adds the ability to download all platform credentials and trust chain credentials from their respective pages in a bulk zip. 2021-10-08 16:35:40 -04:00
Cyrus
e8b320e203
Merge pull request #397 from nsacyber/issued-certificates-update
[#396] DevID display update
2021-10-04 14:38:04 -04:00