Cyrus
|
61c4c81b77
|
Removed comments
|
2021-04-14 12:18:05 -04:00 |
|
Cyrus
|
5a82e48b61
|
Merge branch 'master' into event-digest-update
|
2021-04-13 08:50:42 -04:00 |
|
Cyrus
|
e70e019c6b
|
This commit has some changes to how patch and supplemental are handled. It adds some flags to the Record and Value objects to note that data has been processed so that multiple entries aren't created.
|
2021-04-13 07:45:52 -04:00 |
|
Cyrus
|
760f246096
|
Merge pull request #342 from nsacyber/rim_digest_store
[#341] RIM Event Digest Store
|
2021-04-13 07:45:17 -04:00 |
|
Cyrus
|
39e2ab30d3
|
Corrected error.
|
2021-04-07 13:35:02 -04:00 |
|
Cyrus
|
29257695c1
|
Updated the code with some additional messaging information for the provisioner when it fails. I added a bit of code that eliminates the portal having an error when a support rim is failing, this doesn't allow it to ingest the rim into the database.
|
2021-04-07 10:53:09 -04:00 |
|
Cyrus
|
ea5b85b703
|
Updated the code to now display the var swidtag and rimel. However there are issues with the examples. This commit has fixes for how the pcr values are pulled for display on the base RIM page.
|
2021-04-02 06:34:47 -04:00 |
|
Cyrus
|
4911742c7a
|
This is a checkout of some changes to the resource management for swid tags so that the file name listed is associated with the stored support RIMS.
|
2021-03-30 06:35:14 -04:00 |
|
Cyrus
|
a6c6fbfb31
|
Made some changes for using just the RIM Hash to pull support rims from the database to associated with the swid tag. Changed the rim hash from and int to a string.
|
2021-03-25 13:28:31 -04:00 |
|
Cyrus
|
c290ba25be
|
Modified how unmatched log events are tested. Now it uses the reference event value from the database.
|
2021-03-23 13:13:17 -04:00 |
|
Cyrus
|
2110b7e94d
|
Merge branch 'rim_digest_store' into event-digest-update
|
2021-03-23 11:31:42 -04:00 |
|
Cyrus
|
3e18ed8abb
|
This small update changes where the string array of pcrs is pulled in the validation of the quote. Previously it is from the device info report but now it is from the bios measurement log file from the client.
|
2021-03-23 11:27:30 -04:00 |
|
Cyrus
|
30113c463a
|
This is a quick fix for a null pointer exception that is occuring because the parsed values from the device's pcr list is not populated. They did have something but they didn't match what is in the RIM. Therefore, there should be a failure.
|
2021-03-22 09:52:26 -04:00 |
|
Cyrus
|
108748fb2a
|
Undid some code and change the Digest Value class into a table in the database. This code then updates those values when a provision is initiated. At this time, that is all it does.
|
2021-03-19 11:01:25 -04:00 |
|
Cyrus
|
53cb300063
|
This is an initial commit with changes that add new classes for digest reference matching.
|
2021-03-17 10:23:08 -04:00 |
|
Cyrus
|
c66f4f7648
|
Merge pull request #334 from nsacyber/Unmatched-component-refactor
Unmatched component refactor
|
2021-03-09 13:07:16 -05:00 |
|
Cyrus
|
4b6bcccf85
|
Attempting to merge into master
|
2021-03-09 13:04:56 -05:00 |
|
Cyrus
|
c4741b869c
|
Removed unused import
|
2021-03-09 07:27:35 -05:00 |
|
Cyrus
|
85e29529ae
|
Modified a catch clause
|
2021-03-09 06:46:51 -05:00 |
|
Cyrus
|
bd5bca58ea
|
I have modified the code to correct handle the situation in which the device has more components than the certificate and I have taken steps to make the system test GOOD pass for test A6, A7 and A8.
|
2021-03-05 15:36:29 -05:00 |
|
Cyrus
|
763dcbd975
|
These are changes that were made in the system-tests-test that resolved the issues in the first TPM 2.0 system tests on travis.
|
2021-03-04 08:01:18 -05:00 |
|
Cyrus
|
8a571f1788
|
When a delta has the component that is bad, not the base, it wasn't highlighting. This is because the component failures wasn't be updated and then the certificate needed to be updated as well.
|
2021-02-25 06:59:56 -05:00 |
|
Cyrus
|
a5184f5a5b
|
Final changes that adds in the additional setting for the renewal period threshold. This value indicates that if the end validity has been reached for the current issued attestation certificate, then don't generate one. However if we are within the number of days set by the threshold, then generate the certificate before it expires. The default is 1 year from the end validity.
|
2021-02-23 10:17:56 -05:00 |
|
Cyrus
|
dcf0ec8101
|
Merge branch 'master' into aic-policy-rule
|
2021-02-11 14:13:28 -05:00 |
|
Cyrus
|
7912ff2f2e
|
refactored some code around the SCV objects that should never be null.
|
2021-02-10 12:24:00 -05:00 |
|
Cyrus
|
9917fadef7
|
On a previous commit, I removed a piece of code that checked the base credential first. Because the delta fixed a problem in the base, the base failed before the delta was checked. This was completely removed. On a test that we had previously done, the test passes when it should fail because there is only a base, so that check isn't being done. This change reintroduces the check but in a different location with flags for when there is a delta present.
|
2021-02-09 13:30:37 -05:00 |
|
Cyrus
|
7b79ceb07a
|
Found the issue with the component being removed that doesn't have a proper serial number and adding one with it. The code was revalidating the base in the attributes enabled flag. This was unncessary.
|
2021-02-08 14:25:10 -05:00 |
|
Cyrus
|
4999c96685
|
Updated code to correct situations that were not linking up with properly for delta and platform certificate component validation.
|
2021-02-05 16:10:15 -05:00 |
|
Cyrus
|
677716fa08
|
Merge branch 'master' into Unmatched-component-refactor
|
2021-02-04 08:51:31 -05:00 |
|
Cyrus
|
5589096443
|
Cleaned up some stuff I found during code compare in github.
|
2021-01-20 13:23:51 -05:00 |
|
chubtub
|
88015df551
|
Checkstyle: unused import
|
2021-01-14 13:19:17 -05:00 |
|
Cyrus
|
859fdbef83
|
Added a null check for the platformCredentials in the issued certificate attribute helper so that NPEs aren't thrown.
|
2021-01-14 12:48:53 -05:00 |
|
Cyrus
|
164a43f056
|
These are unit tests that were not run on the merge request #327 for issue 308. The unit tests uses certificate (EC and 2 CAs) that don't match for SKI to AKI or issuer string fields. The O= field isn't required and the code in #327 was changed to use SKI first then a sorted RDN list. See #327. A note was left in the unit tests that the test certs need to be updated.`
|
2021-01-14 12:41:29 -05:00 |
|
Cyrus
|
beb1ccbee3
|
Updated a supply chain validation check for delta certificates. Updated the check for duplicate base platform certificates when storing them for the same device and updated the begin validity date for the delta vs the base check.
|
2021-01-12 12:26:54 -05:00 |
|
Cyrus
|
058c58d208
|
Updated the begin validity date check for the base and delta so that it is only an error if the delta begin date is older than the platform. Equal is allowed.
|
2021-01-07 12:51:01 -05:00 |
|
Cyrus
|
85254d9c44
|
Removed null assignment that isn't used
|
2021-01-05 08:14:18 -05:00 |
|
Cyrus
|
7028810707
|
This latest push should have the code that'll highlight the components based on a string rather than the serial number. This also adds additional checks for the validity begin date of the delta not matching or being before the base. It also checks that they don't have the same certificate serial number.
|
2020-12-30 08:41:47 -05:00 |
|
Cyrus
|
6dd948c828
|
Added a null check for the endorsement credential for the tpm 1.2
|
2020-12-18 06:58:18 -05:00 |
|
Cyrus
|
a7eae2fd77
|
Test out an potential exception
|
2020-12-17 13:09:03 -05:00 |
|
Cyrus
|
f38fa87013
|
Undid some code I took out
|
2020-12-17 09:31:39 -05:00 |
|
Cyrus
|
1db52cebf9
|
This is a stopping point because the code can't be fully worked out because the data (certificates) aren't correct.
|
2020-12-17 07:24:51 -05:00 |
|
Cyrus
|
62c7ca2d90
|
This PR is to address issue #308. The ACA was pulling Issuer Certificates using the organization RDN of the subject string and getting this from the issuer string of the EC or PC. This presents a problem because it isn't a required field. The organization field cannot be null or empty. Pulling objects from a DB using null or empty would produce bad results. The main change of this issue (which has not been full tested) is pulling using the AKI for the db lookup. If this fails, instead of falling back on potentially left out fields like the O= RDN, the ACA takes the issuer/subject fields, breaks them apart and sorts them based on the key. It also changes the case. This way the lookup can be assured to match in case of some random situation in which the issuer or subject field don't match because RDN keys are just in different positions of the string.
|
2020-12-11 14:47:46 -05:00 |
|
Cyrus
|
209024c12a
|
Cleaned up some comments and code.
|
2020-12-07 09:47:54 -05:00 |
|
Cyrus
|
a3de35ed27
|
The issue with the tpm 1.2 system test failing had to do with the string to integer conversion using getInteger instead of parseInt.
|
2020-12-07 07:44:48 -05:00 |
|
Cyrus
|
11f238f671
|
Testing system tests
|
2020-12-04 08:36:42 -05:00 |
|
Cyrus
|
e64c6cf772
|
Merge branch 'master' into aic-policy-rule
|
2020-12-03 13:34:29 -05:00 |
|
Cyrus
|
e32e9412d8
|
Merge branch 'master' into Unmatched-component-refactor
|
2020-12-03 13:20:12 -05:00 |
|
Cyrus
|
a07fbbd847
|
In a previous pull request, the reference manifest manager was not called to update the unarchived base rim. So it appears to never have been uploaded.
|
2020-12-02 11:46:42 -05:00 |
|
Cyrus
|
7d49f63a9b
|
Merge branch 'master' into multiple-rim-upload
|
2020-12-02 11:05:12 -05:00 |
|
Cyrus
|
70662bddec
|
Updated how the bios measurement file is uploaded. Changed the code to pull the string from the properties file instead of a hard link in the code.
|
2020-12-01 11:13:41 -05:00 |
|