iadgovuser29
|
a5c5a3ac60
|
Add additional location for pci.ids file and fix checkstyle issues from
previous commit.
|
2021-12-02 12:28:41 -05:00 |
|
Cyrus
|
68be67b73a
|
Added default values to the provisioner for tcg certs and rim files
|
2021-12-01 13:57:18 -05:00 |
|
Cyrus
|
139e4c8972
|
Added null pointer check to RDR variable.
|
2021-11-24 14:27:15 -05:00 |
|
iadgovuser29
|
95c5e40f89
|
Utilize protobuf to parse claim response. Work on array handling on ACA.
|
2021-11-23 22:01:16 -05:00 |
|
Cyrus
|
483099a273
|
Updated the policy code to modify the measurement array length and ignore PCR 10 as well.
|
2021-11-23 10:06:21 -05:00 |
|
Cyrus
|
cf4e641273
|
Added log statement for quote.
|
2021-11-23 09:40:11 -05:00 |
|
Cyrus
|
4c46758d9a
|
This commit is a feature update. The IMA PCR enable/diable is being enhanced to update the mask the provisioner uses to pull the quote from the TPM. This code will send down a string range of PCR values that excludes PCR 10. The quote that is returned should be a composite without the PCR 10. There will be a log statement in this commit that should be removed.
|
2021-11-23 09:36:00 -05:00 |
|
chubtub
|
a3ef981206
|
Merge branch 'issue-381' of github.com:nsacyber/HIRS into issue-381
|
2021-11-19 01:50:32 -05:00 |
|
chubtub
|
1eca360a4d
|
Modify log messages so that validation failures from certs in the keystore that are not actually in the chain do not raise undue attention
|
2021-11-19 01:50:05 -05:00 |
|
chubtub
|
8b5027de4c
|
Modify log messages so that validation failures from certs in the keystore that are not actually in the chain do not raise undue attention
|
2021-11-17 10:15:31 -05:00 |
|
chubtub
|
23a086c925
|
Merge branch 'issue-381' of github.com:nsacyber/HIRS into issue-381
|
2021-11-17 10:06:58 -05:00 |
|
chubtub
|
d5fcd06902
|
Add error handling to clarify endorsement validation error
|
2021-11-16 16:59:56 -05:00 |
|
Cyrus
|
cfb9cb7535
|
Uncommented the code that deals with the signing certificate.
|
2021-11-15 09:43:31 -05:00 |
|
Cyrus
|
d31b710824
|
This is a test run to ignore endorsement credential verification during firmware testing.
|
2021-11-12 14:24:33 -05:00 |
|
Cyrus
|
c944aab335
|
Added a log statement to get more information about the certificate that is failing signature verification.
|
2021-11-12 11:31:00 -05:00 |
|
chubtub
|
d183504a3f
|
Merge branch 'master' into issue-381
|
2021-11-10 10:08:42 -05:00 |
|
Cyrus
|
0934b3106f
|
Merge pull request #420 from nsacyber/base-rim-link-fix
RimLinkHash Fix
|
2021-11-10 10:06:11 -05:00 |
|
Cyrus
|
70d92c4b38
|
Merge pull request #417 from nsacyber/issue-404
[#404] PXE Policy options
|
2021-11-10 10:05:52 -05:00 |
|
Cyrus
|
04b050de15
|
The rimlinkhash meta information wasn't linking up with the associated swidtag. This is because the wrong hash look up was being used. Previously when the hexDecHash and base64Hash were implemented, the main focus was on the rimel and not the swidtag.
|
2021-11-10 09:50:17 -05:00 |
|
Cyrus
|
2d9fb19d38
|
Updated the new polices after doing a bit of testing to make sure that they do ignore when there is a failure on that specific bit.
|
2021-11-10 07:27:33 -05:00 |
|
chubtub
|
e0a1e53d93
|
Handle an exception thrown when the provisioner fails to send RIM files to the ACA
|
2021-11-08 14:51:38 -05:00 |
|
chubtub
|
0c233ae771
|
Set signature validity so that the ACA can report accurately
|
2021-11-08 14:51:38 -05:00 |
|
chubtub
|
3a6be133eb
|
Checkstyle changes
|
2021-11-08 14:51:38 -05:00 |
|
chubtub
|
bc7e07583f
|
Match only the actual extension bytes of the SKID
|
2021-11-08 14:51:38 -05:00 |
|
chubtub
|
962ca45bb7
|
Modify ACA RIM validation to search for a signing cert if the base RIM does not have an embedded cert. Validate the ca chain of the found signing cert.
|
2021-11-08 14:46:04 -05:00 |
|
Cyrus
|
f0ea84d199
|
I added code to do different masks on the pcr selection, but that was not needed. So I just uncommented the one section of ignore not being used.
|
2021-11-05 16:11:28 -04:00 |
|
chubtub
|
7bb9d8698d
|
Merge pull request #408 from nsacyber/support-rim-filename-correction
Support RIM Filename Fix
|
2021-11-05 08:57:06 -04:00 |
|
Cyrus
|
e82de12341
|
Updated the ignore OS events check with the last rule for #404
|
2021-11-01 09:35:36 -04:00 |
|
Cyrus
|
fe617ea948
|
Updated the policy code to ignore based on the TPM Log Event. Added in the code for OS Events.
|
2021-10-29 20:24:46 -04:00 |
|
Cyrus
|
aae6845730
|
Initial Commit. This adds the visual object to the policy page.
|
2021-10-29 14:55:23 -04:00 |
|
iadgovuser26
|
5434fe8ca7
|
Merge pull request #412 from nsacyber/issue/411
[#411] Changed assumption regarding Delta cert components with ADDED status
|
2021-10-28 10:02:05 -04:00 |
|
Cyrus
|
04a66da5f3
|
Merge pull request #413 from nsacyber/cpp-compiler-warning-fix
Cpp Compiler Warning fixes
|
2021-10-27 16:12:36 -04:00 |
|
Cyrus
|
79127e57d1
|
Initi commit. There are warning that newer compilers are throwing for vector.at and vector.size. These are removed. In addition a char** in a main parameter was made into a const.
|
2021-10-27 14:55:50 -04:00 |
|
iadgovuser29
|
867833dc9d
|
[#411] Changed assumption regarding Delta cert components with ADDED status.
|
2021-10-27 14:14:09 -04:00 |
|
iadgovuser26
|
cf97b15b13
|
Merge pull request #410 from nsacyber/issue/409
[#409] Loop will exit if delta component is matched.
|
2021-10-27 12:53:10 -04:00 |
|
Cyrus
|
b0835d1cf5
|
Changed the compare to the hash value for the file instead of the filename.
|
2021-10-27 08:58:51 -04:00 |
|
iadgovuser29
|
647c88d16b
|
[#409] Fixed one problem with delta component checking.
|
2021-10-26 15:53:05 -04:00 |
|
Cyrus
|
bb6ec6cc4b
|
The rim hash validation icon is coming up red when both base and support RIMs are loaded. This fixes that issue.
|
2021-10-26 11:09:36 -04:00 |
|
iadgovuser26
|
3f9c6c9d44
|
Merge pull request #406 from nsacyber/global-var-change
[#402] pcrValues global variable change
|
2021-10-20 18:15:56 -04:00 |
|
iadgovuser26
|
124752c72d
|
Merge pull request #403 from nsacyber/rim-lookup-fix
Supplemental RIM Hash Fix
|
2021-10-20 18:15:43 -04:00 |
|
Cyrus
|
c77ad68c08
|
The variable pcrValues in Abstract Attestation CA class didn't need to be global, this was removed and set to a local variable with an empty string.
|
2021-10-20 14:29:53 -04:00 |
|
iadgovuser26
|
8b25ae698a
|
Merge pull request #402 from nsacyber/issue/uriref-algorithmidentifier-parsing
[#401] Changed instanceof check and error message.
|
2021-10-19 14:32:02 -04:00 |
|
Cyrus
|
8f2290300e
|
The wrong hash was use for the look up
|
2021-10-18 09:53:59 -04:00 |
|
iadgovuser29
|
e8085aae0f
|
[#401] Changed instanceof check and error message.
|
2021-10-17 21:51:29 -04:00 |
|
Cyrus
|
e5470eded5
|
Merge pull request #400 from nsacyber/tpm-version-fix
CPP Compiler fix
|
2021-10-14 17:43:11 -04:00 |
|
Cyrus
|
ff56d83443
|
A compiler error was happening with an uninitialized float variable.
|
2021-10-14 13:58:59 -04:00 |
|
Cyrus
|
e8b320e203
|
Merge pull request #397 from nsacyber/issued-certificates-update
[#396] DevID display update
|
2021-10-04 14:38:04 -04:00 |
|
Cyrus
|
e51f01d52e
|
Changed DevID to LDevID on the policy page and removed the Attestation reference for LDevID
|
2021-10-04 10:37:02 -04:00 |
|
Cyrus
|
f8a3ccd962
|
This is an initial commit updates the policy page. Adds additional policies for generating a DevID. The underlying code doesn't actually generate one yet. But the SupplyChainPolicy holds the flags.
|
2021-09-17 07:55:44 -04:00 |
|
iadgovuser26
|
aa45391cc3
|
run individual unit tests
|
2021-09-02 15:18:20 -04:00 |
|