Commit Graph

1649 Commits

Author SHA1 Message Date
iadgovuser26
f2fd7f31bd conflict resoltion step 1 2020-06-10 14:04:23 -04:00
iadgovuser26
75734015a7 rephrased EV_EFI_BOOT_SERVICES_APPLICATION message when no device path is present 2020-06-10 11:35:00 -04:00
Cyrus
da5bc217ef
[#236] Firmware validation update part 2 (#259)
* Modified the hirs.data.persist package to have better fidelity into the objects necessary to create and maintain a baseline.  the info objects will be next.
2020-06-10 11:17:45 -04:00
chubtub
40da3cea59
Merge branch 'master' into issue-252 2020-06-09 07:06:45 -04:00
iadgovuser26
dd068131fa added a eventcheck script to check and event log against a signed RIM 2020-06-09 06:59:04 -04:00
iadgovuser26
8735aa44e5 added tcg_eventlog_tool 2020-06-09 06:59:03 -04:00
iadgovuser26
e6f63f935e Added support for obtaining event and content data. Removed TCGLogProcessor. 2020-06-09 06:59:03 -04:00
iadgovuser26
e7a59f470a added command line log parser 2020-06-09 06:59:02 -04:00
chubtub
0a658fb3d8
Merge pull request #239 from nsacyber/issue-237
[#237] Migrate cli to JCommander
2020-06-08 07:22:52 -04:00
chubtub
8eda518b0a Add exit code 1 for failed validation 2020-06-08 06:50:46 -04:00
chubtub
6ae5a18f99 Implement --create, --attributes, --out, and --help in JCommander
Add KeyName (subjectKeyIdentifier) and KeyValue (public key) to KeyInfo element

Implement --privateKeyFile and --publicCertificate in JCommander

Implement -v in JCommander. Clean up unit tests.

Implement support for PKCS1 in CredentialParser class.

Truncate # symbol after parsing subject key identifier

Close input streams in CredentialParser class

Closes #237
2020-06-08 06:50:46 -04:00
iadgovuser26
eab79a86be Merge branch 'master' into issue-251 2020-06-05 12:45:47 -04:00
Cyrus
70504e7423
Modified how TPM2 Provisioner pulls down sub module cpr (#255) 2020-06-05 11:54:41 -04:00
iadgovuser26
330af62e98 modified build.gradle to build RPMs. 2020-05-29 17:20:06 -04:00
iadgovuser26
ff955bd499 added a eventcheck script to check and event log against a signed RIM 2020-05-27 17:31:15 -04:00
iadgovuser26
1cf1d4ec92 Merge branch 'issue-237' into issue-252 2020-05-15 12:20:29 -04:00
iadgovuser26
56552898da Merge branch 'issue-249' into issue-252 2020-05-15 12:19:58 -04:00
iadgovuser26
2ccd3a180e
Merge pull request #248 from nsacyber/issue-245
[#245] TCG Event Log - Event Processing
2020-05-15 11:39:12 -04:00
iadgovuser26
4e6e94aea3 fixed merge issue 2020-05-15 11:00:49 -04:00
iadgovuser26
b8f4182415 added tcg_eventlog_tool 2020-05-15 10:46:47 -04:00
iadgovuser26
70986caf5c
Merge branch 'master' into issue-245 2020-05-15 09:32:16 -04:00
iadgovuser26
2743077c83
Merge pull request #244 from nsacyber/issue-242
[#242] Add UEFI Variable processing for TCG Event Logs
2020-05-15 08:50:37 -04:00
iadgovuser26
f24c53f6c6 Added support for obtaining event and content data. Removed TCGLogProcessor. 2020-05-13 08:06:58 -04:00
iadgovuser26
a7d57f92d9 added command line log parser 2020-05-01 18:11:34 -04:00
iadgovuser26
7a9dc26df5 Added TCG Event Processing. 2020-05-01 09:18:14 -04:00
iadgovuser26
dda14ca16d Merge branch 'issue-242' into issue-245 2020-04-28 10:50:34 -04:00
iadgovuser26
3ae9cb87c8 Made code review adjustments 2020-04-28 10:11:51 -04:00
lareine
94cf172ce8 add support for EvCompactHash EvEfiSpecIdEvent and EvNoAction events 2020-03-27 15:58:05 -04:00
lareine
faa77be822 Merge branch 'issue-242' into issue-245
Uefi support included into issue-245.
2020-03-27 13:43:59 -04:00
iadgovuser26
d7f075d70c
Merge pull request #241 from nsacyber/issue-240
[#240] Adds ability to get the DigestAlgorithm from an Event Log
2020-03-27 11:00:17 -04:00
lareine
62247f8cfb Fixed unmappable character for encoding ASCII issue 2020-03-27 10:41:21 -04:00
Cyrus
2805df9f8b
[#236] Firmware validation update part 1 (#243)
* This commit includes changes to the provisioner for what is sent up.  Originally only SHA256 was being used, this change includes both.
* This last commit cover the items 2-4 in issue #236.  The Provisioner sends up and updated list of pcrs that include 256, not just sha1.  The validation and policy pages have been updated.  A second pull request will be created to address parsing the information into a baseline.
2020-03-27 10:13:37 -04:00
chubtub
c317dcff26 Truncate # symbol after parsing subject key identifier 2020-03-27 09:26:19 -04:00
lareine
fecc84a5be Added unit tests for Uefi processing. 2020-03-27 08:20:04 -04:00
chubtub
2108d902a4 Implement support for PKCS1 in CredentialParser class. 2020-03-26 13:42:31 -04:00
lareine
828e6d4e65 added uefi variable processing 2020-03-24 13:12:44 -04:00
lareine
b5867e0cf6 added UEFI GUID, Partiton, and Firmware Varible support 2020-03-17 17:08:09 -04:00
chubtub
0c57e58c46 Implement -v in JCommander. Clean up unit tests. 2020-03-17 17:05:19 -04:00
lareine
236f5c221a removed generated_swidTag.swidtag 2020-03-17 09:49:42 -04:00
lareine
f3da6b44ac Added methods to retrieve event log hash algorithm and algorithm id 2020-03-17 09:48:02 -04:00
chubtub
0123a081a8 Implement --privateKeyFile and --publicCertificate in JCommander 2020-03-12 16:34:34 -04:00
chubtub
030ce39613 Add KeyName (subjectKeyIdentifier) and KeyValue (public key) to KeyInfo element 2020-03-12 11:47:44 -04:00
chubtub
7de7f47f95 Implement --create, --attributes, --out, and --help in JCommander 2020-03-11 13:02:43 -04:00
chubtub
8b36d2636b
Merge pull request #232 from nsacyber/issue-231
[#231] Last minute tcg_rim_tool CLI changes
2020-03-06 08:55:14 -05:00
Cyrus
21db725815
[#230] Update RIM details page to display PCRs (#233)
* This is an update to the display of the Reference Integrity Manifest code base that'll allow a user to upload a swidtag.  This code includes some additions from #217, slightly modified.

* This code update include changes to import, archive and delete a swidtag into the RIM object.

* Updated the code with additional checks on the uploaded file locations.  Added the number associated with the PCR value to the detail page.

* This change fixes the bug that caused the rim detail page to go blank if the associated event log file associated with the resource file doesn't exist.

Co-authored-by: lareine <lareine@tycho.ncsc.mil>
2020-03-06 07:06:09 -05:00
Cyrus
5dbbbafafe
Updated a check on the SERIAL_INDEX in certificate string map builder. (#235) 2020-03-06 07:04:13 -05:00
chubtub
3692262055 Clean up unit tests 2020-03-05 12:11:59 -05:00
chubtub
094efb37df Added CLI arg to control hiding/showing signature cert (default=hide) 2020-02-27 08:44:26 -05:00
chubtub
6dd9615ee0
Merge pull request #207 from nsacyber/packaging_install_error
Fix HIRS_Provisioner install error
2020-02-25 14:38:31 -05:00
busaboy1340
b73b7f218b
[#228] Update TPM Provisioner Docker images with latest PACCOR (v1.1.4r2) (#229)
* Update Docker TPMProvisioner images to latest PACCOR.

* Test updated docker images from hirs Docker Hub

* Update TPM Provisioner Docker images with latest PACCOR (v1.1.4r1)

* Updated TPM images on Docker Hub.

* Update TPM provisioner docker images with PACCOR v1.1.4r2

* Updated docker-compose files

* Updated TPM provisioner images in Docker Hub.
2020-02-25 10:30:37 -05:00