mirror of
https://github.com/nsacyber/HIRS.git
synced 2024-12-27 00:21:14 +00:00
155 lines
3.8 KiB
Bash
Executable File
155 lines
3.8 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# Script to setup the TPM 1.2 Provisioner Docker Image for Integration Tests
|
|
set -e
|
|
|
|
# Wait for ACA to boot
|
|
echo "Waiting for ACA to spin up..."
|
|
until [ "`curl --silent --connect-timeout 1 -I -k https://${HIRS_ACA_PORTAL_IP}:${HIRS_ACA_PORTAL_PORT}/HIRS_AttestationCAPortal | grep '302 Found'`" != "" ]; do
|
|
:
|
|
done
|
|
echo "ACA is up!"
|
|
|
|
# Function to install TPM 1.2 Provisioner packages
|
|
function InstallProvisioner {
|
|
echo "===========Installing TPM 1.2 Provisioner Packages...==========="
|
|
|
|
pushd /HIRS
|
|
|
|
if [ ! -d package/rpm/RPMS ]; then
|
|
./package/package.centos.sh
|
|
fi
|
|
|
|
yum install -y package/rpm/RPMS/noarch/HIRS_Provisioner_TPM_1_2*.el7.noarch.rpm
|
|
|
|
popd
|
|
}
|
|
|
|
# Function to initialize the TPM 1.2 Emulator
|
|
function InitTpmEmulator {
|
|
echo "===========Initializing TPM 1.2 Emulator...==========="
|
|
|
|
# Set variables for server
|
|
export TPM_PATH=/tpm_emulator/tpm_storage
|
|
export TPM_PORT=6543
|
|
|
|
# Set variables for client utils
|
|
export TPM_SERVER_NAME=localhost
|
|
export TPM_SERVER_PORT=6543
|
|
|
|
# Set variable for TrouSerS
|
|
export TCSD_TCP_DEVICE_PORT=6543
|
|
|
|
mkdir -p $TPM_PATH
|
|
|
|
pushd /tpm_emulator
|
|
|
|
echo "Activate Software TPM..."
|
|
# Activate Software TPM
|
|
./tpm/tpm_server > tpm.log 2>&1 &
|
|
./libtpm/utils/tpmbios
|
|
|
|
echo "Restarting Software TPM after Activation..."
|
|
# Restart Software TPM after Activation
|
|
pkill tpm_server
|
|
./tpm/tpm_server > tpm.log 2>&1 &
|
|
./libtpm/utils/tpmbios
|
|
|
|
echo "Creating EK on Software TPM..."
|
|
# Create EK on Software TPM
|
|
./libtpm/utils/createek
|
|
|
|
echo "Initializing last memory address..."
|
|
# Initialize last memory address
|
|
./libtpm/utils/nv_definespace -in ffffffff -sz 0
|
|
|
|
popd
|
|
|
|
echo "Starting TrouSerS Daemon..."
|
|
tcsd -e
|
|
|
|
echo "Taking TPM 1.2 Ownership..."
|
|
tpm_takeownership -y -z
|
|
|
|
echo "Testing TPM 1.2 Connectivity..."
|
|
tpm_selftest
|
|
|
|
echo "TPM 1.2 NV info..."
|
|
tpm_nvinfo
|
|
|
|
echo "===========TPM 1.2 Emulator Initialization Complete!==========="
|
|
}
|
|
|
|
# Function to update the hirs-site.config file
|
|
function UpdateHirsSiteConfigFile {
|
|
HIRS_SITE_CONFIG="/etc/hirs/hirs-site.config"
|
|
|
|
echo ""
|
|
echo "===========Updating ${HIRS_SITE_CONFIG}, using values from /HIRS/.ci/docker/.env file...==========="
|
|
cat /HIRS/.ci/docker/.env
|
|
|
|
cat <<DEFAULT_SITE_CONFIG_FILE > $HIRS_SITE_CONFIG
|
|
#*******************************************
|
|
#* HIRS site configuration properties file
|
|
#*******************************************
|
|
CLIENT_HOSTNAME=${HIRS_ACA_PROVISIONER_IP}
|
|
TPM_ENABLED=${TPM_ENABLED}
|
|
IMA_ENABLED=${IMA_ENABLED}
|
|
|
|
# Site-specific configuration
|
|
ATTESTATION_CA_FQDN=${HIRS_ACA_HOSTNAME}
|
|
ATTESTATION_CA_PORT=${HIRS_ACA_PORTAL_PORT}
|
|
BROKER_FQDN=${HIRS_ACA_PORTAL_IP}
|
|
BROKER_PORT=${HIRS_BROKER_PORT}
|
|
PORTAL_FQDN=${HIRS_ACA_PORTAL_IP}
|
|
PORTAL_PORT=${HIRS_ACA_PORTAL_PORT}
|
|
|
|
DEFAULT_SITE_CONFIG_FILE
|
|
|
|
echo "===========New HIRS Config File==========="
|
|
cat /etc/hirs/hirs-site.config
|
|
}
|
|
|
|
function UpdateLoggingConfigFile {
|
|
LOGGING_CONFIG="/etc/hirs/logging.properties"
|
|
|
|
echo ""
|
|
echo "===========Updating ${LOGGING_CONFIG} file...==========="
|
|
cat /etc/hirs/logging.properties
|
|
|
|
cat <<DEFAULT_LOGGING_CONFIG_FILE > $LOGGING_CONFIG
|
|
root.level=DEBUG
|
|
hirs.level=DEBUG
|
|
org.hibernate.level=
|
|
org.springframework.level=
|
|
org.apache.activemq.level=
|
|
tpm2_provisioner.level=DEBUG
|
|
|
|
DEFAULT_LOGGING_CONFIG_FILE
|
|
|
|
echo ""
|
|
echo "===========New Logging Properties File==========="
|
|
cat /etc/hirs/logging.properties
|
|
}
|
|
|
|
# Install packages
|
|
InstallProvisioner
|
|
|
|
# Install TPM 1.2 Emulator
|
|
InitTpmEmulator
|
|
|
|
# Update the hirs-site.config file
|
|
UpdateHirsSiteConfigFile
|
|
|
|
# Update the logging.properties file
|
|
UpdateLoggingConfigFile
|
|
|
|
# Set alias to use python3
|
|
echo "===========Python Version==========="
|
|
python3 --version
|
|
alias python='/usr/bin/python3.6'
|
|
alias
|
|
|
|
echo ""
|
|
echo "===========HIRS ACA TPM 1.2 Provisioner Setup Complete!==========="
|