Cyrus
|
5858e36313
|
Updated the implementation to return a blank identity claim response.
The provisioner tests the blob and if it is empty, exit
|
2022-01-05 16:49:27 -05:00 |
|
Cyrus
|
78e308e67d
|
The provisioner was throwing an error to the standard printout because
of protobuf. This had to do with the recent change to checking the
Identity Claim Response and the use of the has_credentialBlob check.
|
2022-01-05 07:36:21 -05:00 |
|
iadgovuser26
|
e598b78518
|
Merge pull request #422 from nsacyber/issue-338
System Test Refactor
|
2021-12-16 10:40:22 -05:00 |
|
iadgovuser26
|
bf8ef387c1
|
Merge pull request #407 from nsacyber/issue-381
[#381] Update RIM validation in ACA
|
2021-12-16 10:39:58 -05:00 |
|
chubtub
|
e1417ab7c2
|
Merge pull request #425 from nsacyber/issue-424
Upgraded log4j to 2.16.0
|
2021-12-14 22:30:19 -05:00 |
|
chubtub
|
c8438999c9
|
Upgraded log4j to 2.16.0
|
2021-12-14 11:54:10 -05:00 |
|
iadgovuser29
|
da9c8469ba
|
Re-creating the componentidentifer here lost important information.
|
2021-12-10 20:58:44 -05:00 |
|
iadgovuser29
|
e22d95c2e6
|
Modified so PCI ID translation will highlight delta certs and show in Tooltips
|
2021-12-10 09:07:28 -05:00 |
|
Cyrus
|
9b790cb805
|
checking for class cast now. Highlighting appears.
|
2021-12-03 17:01:18 -05:00 |
|
Cyrus
|
6337367ba9
|
Added Pci IDs translate to the HIRS_Util module for the supply chain validator process so that the hash can match up for highlighting failed components.
|
2021-12-03 16:01:04 -05:00 |
|
iadgovuser29
|
a5c5a3ac60
|
Add additional location for pci.ids file and fix checkstyle issues from
previous commit.
|
2021-12-02 12:28:41 -05:00 |
|
iadgovuser26
|
e07feb4be1
|
Merge pull request #421 from nsacyber/issue-418
[#418] Change json parsing package
|
2021-12-02 11:05:22 -05:00 |
|
iadgovuser26
|
f8e549a458
|
Merge pull request #399 from nsacyber/certificate-bulk-download
Bulk Certificate Download
|
2021-12-02 11:04:40 -05:00 |
|
Cyrus
|
68be67b73a
|
Added default values to the provisioner for tcg certs and rim files
|
2021-12-01 13:57:18 -05:00 |
|
Cyrus
|
139e4c8972
|
Added null pointer check to RDR variable.
|
2021-11-24 14:27:15 -05:00 |
|
iadgovuser29
|
95c5e40f89
|
Utilize protobuf to parse claim response. Work on array handling on ACA.
|
2021-11-23 22:01:16 -05:00 |
|
Cyrus
|
483099a273
|
Updated the policy code to modify the measurement array length and ignore PCR 10 as well.
|
2021-11-23 10:06:21 -05:00 |
|
Cyrus
|
cf4e641273
|
Added log statement for quote.
|
2021-11-23 09:40:11 -05:00 |
|
Cyrus
|
4c46758d9a
|
This commit is a feature update. The IMA PCR enable/diable is being enhanced to update the mask the provisioner uses to pull the quote from the TPM. This code will send down a string range of PCR values that excludes PCR 10. The quote that is returned should be a composite without the PCR 10. There will be a log statement in this commit that should be removed.
|
2021-11-23 09:36:00 -05:00 |
|
chubtub
|
a3ef981206
|
Merge branch 'issue-381' of github.com:nsacyber/HIRS into issue-381
|
2021-11-19 01:50:32 -05:00 |
|
chubtub
|
1eca360a4d
|
Modify log messages so that validation failures from certs in the keystore that are not actually in the chain do not raise undue attention
|
2021-11-19 01:50:05 -05:00 |
|
5B96790E3664F40075A67E6ADF737EDB15B4408DBC91A81228B31537B0CE3E26
|
3f091a3827
|
Merge pull request #415 from nsacyber/issue/414
[#414] Handle MODIFIED component without serial number
|
2021-11-18 08:54:09 -05:00 |
|
lareine
|
979adfdae3
|
System test passes
|
2021-11-17 11:33:44 -05:00 |
|
chubtub
|
893c1db804
|
Merge pull request #416 from nsacyber/support-file-revision
Vendor Table JSON refactor
|
2021-11-17 10:55:31 -05:00 |
|
chubtub
|
8b5027de4c
|
Modify log messages so that validation failures from certs in the keystore that are not actually in the chain do not raise undue attention
|
2021-11-17 10:15:31 -05:00 |
|
chubtub
|
23a086c925
|
Merge branch 'issue-381' of github.com:nsacyber/HIRS into issue-381
|
2021-11-17 10:06:58 -05:00 |
|
lareine
|
f74c5f72e7
|
System test failure
|
2021-11-17 09:20:07 -05:00 |
|
lareine
|
da502fbf42
|
ci system test refactor
|
2021-11-16 17:11:40 -05:00 |
|
chubtub
|
d5fcd06902
|
Add error handling to clarify endorsement validation error
|
2021-11-16 16:59:56 -05:00 |
|
lareine
|
f939604822
|
updated docker login
|
2021-11-16 16:57:44 -05:00 |
|
lareine
|
09d71ddc18
|
initial ci system test refactor
|
2021-11-16 16:51:42 -05:00 |
|
Cyrus
|
cfb9cb7535
|
Uncommented the code that deals with the signing certificate.
|
2021-11-15 09:43:31 -05:00 |
|
Cyrus
|
d31b710824
|
This is a test run to ignore endorsement credential verification during firmware testing.
|
2021-11-12 14:24:33 -05:00 |
|
Cyrus
|
c944aab335
|
Added a log statement to get more information about the certificate that is failing signature verification.
|
2021-11-12 11:31:00 -05:00 |
|
chubtub
|
064dab89c8
|
Change from com.eclipsesource.json package to javax.json for parsing
|
2021-11-10 12:59:13 -05:00 |
|
chubtub
|
d183504a3f
|
Merge branch 'master' into issue-381
|
2021-11-10 10:08:42 -05:00 |
|
Cyrus
|
0934b3106f
|
Merge pull request #420 from nsacyber/base-rim-link-fix
RimLinkHash Fix
|
2021-11-10 10:06:11 -05:00 |
|
Cyrus
|
70d92c4b38
|
Merge pull request #417 from nsacyber/issue-404
[#404] PXE Policy options
|
2021-11-10 10:05:52 -05:00 |
|
Cyrus
|
04b050de15
|
The rimlinkhash meta information wasn't linking up with the associated swidtag. This is because the wrong hash look up was being used. Previously when the hexDecHash and base64Hash were implemented, the main focus was on the rimel and not the swidtag.
|
2021-11-10 09:50:17 -05:00 |
|
Cyrus
|
2d9fb19d38
|
Updated the new polices after doing a bit of testing to make sure that they do ignore when there is a failure on that specific bit.
|
2021-11-10 07:27:33 -05:00 |
|
Cyrus
|
2547cb6cce
|
This initial commit updates the location of the vendor-table.json which is used by the ACA and the eventlog tool. The previous change moved the vendor-table.json to a separate folder, however the code was not updated to reflect the change. This instead updates how the two install handle the file. The ACA was updated not to clobber the file if it exists and the eventlog tool was updated to do the same through an additional script called post install.
|
2021-11-09 08:32:04 -05:00 |
|
chubtub
|
e0a1e53d93
|
Handle an exception thrown when the provisioner fails to send RIM files to the ACA
|
2021-11-08 14:51:38 -05:00 |
|
chubtub
|
0c233ae771
|
Set signature validity so that the ACA can report accurately
|
2021-11-08 14:51:38 -05:00 |
|
chubtub
|
3a6be133eb
|
Checkstyle changes
|
2021-11-08 14:51:38 -05:00 |
|
chubtub
|
bc7e07583f
|
Match only the actual extension bytes of the SKID
|
2021-11-08 14:51:38 -05:00 |
|
chubtub
|
962ca45bb7
|
Modify ACA RIM validation to search for a signing cert if the base RIM does not have an embedded cert. Validate the ca chain of the found signing cert.
|
2021-11-08 14:46:04 -05:00 |
|
Cyrus
|
f0ea84d199
|
I added code to do different masks on the pcr selection, but that was not needed. So I just uncommented the one section of ignore not being used.
|
2021-11-05 16:11:28 -04:00 |
|
chubtub
|
7bb9d8698d
|
Merge pull request #408 from nsacyber/support-rim-filename-correction
Support RIM Filename Fix
|
2021-11-05 08:57:06 -04:00 |
|
Cyrus
|
bd5d905990
|
Updated the code to include bulk downloads for issued, eks.
|
2021-11-04 15:55:55 -04:00 |
|
Cyrus
|
e82de12341
|
Updated the ignore OS events check with the last rule for #404
|
2021-11-01 09:35:36 -04:00 |
|