Started implementing Notification Handshake and Send Message Functions
This commit is contained in:
Sansar Choinyambuu
committed by
Andreas Steffen
Andreas Steffen
parent
12c0a261cc
commit
1dd8f9f6b1
@@ -21,20 +21,58 @@
|
||||
#include <ietf/ietf_attr_pa_tnc_error.h>
|
||||
#include <tcg/tcg_attr.h>
|
||||
|
||||
#include <tcg/tcg_pts_attr_req_proto_caps.h>
|
||||
#include <tcg/tcg_pts_attr_meas_algo.h>
|
||||
#include <tcg/tcg_pts_attr_get_tpm_version_info.h>
|
||||
#include <tcg/tcg_pts_attr_get_aik.h>
|
||||
#include <tcg/tcg_pts_attr_req_funct_comp_evid.h>
|
||||
#include <tcg/tcg_pts_attr_gen_attest_evid.h>
|
||||
#include <tcg/tcg_pts_attr_req_file_meas.h>
|
||||
|
||||
#include <tncif_pa_subtypes.h>
|
||||
|
||||
#include <pen/pen.h>
|
||||
#include <debug.h>
|
||||
#include <utils/linked_list.h>
|
||||
|
||||
#include <trousers/tss.h>
|
||||
#include <trousers/trousers.h>
|
||||
|
||||
/* IMV definitions */
|
||||
|
||||
static const char imv_name[] = "Attestation";
|
||||
|
||||
/**
|
||||
* UTF-8 encoding of the character used to delimiter the filename
|
||||
*/
|
||||
#define SOLIDUS_UTF = 0x002F
|
||||
#define REVERSE_SOLIDUS_UTF = 0x005C
|
||||
|
||||
#define IMV_VENDOR_ID PEN_TCG
|
||||
#define IMV_SUBTYPE PA_SUBTYPE_TCG_PTS
|
||||
|
||||
static imv_agent_t *imv_attestation;
|
||||
|
||||
/**
|
||||
* List of files and directories to measure
|
||||
*/
|
||||
static linked_list_t *file_list, *directory_list;
|
||||
|
||||
/**
|
||||
* Monotonic increasing number for Request File Measurement attribute
|
||||
*/
|
||||
static u_int16_t request_id_counter = 0;
|
||||
|
||||
/**
|
||||
* Struct to hold file or directory name with the request ID for Request File Measurement attribute
|
||||
*/
|
||||
typedef struct measurement_req_entry_t measurement_req_entry_t;
|
||||
|
||||
struct measurement_req_entry_t {
|
||||
char *path;
|
||||
u_int16_t request_id;
|
||||
};
|
||||
|
||||
/**
|
||||
* see section 3.7.1 of TCG TNC IF-IMV Specification 1.2
|
||||
*/
|
||||
@@ -71,6 +109,11 @@ TNC_Result TNC_IMV_NotifyConnectionChange(TNC_IMVID imv_id,
|
||||
{
|
||||
imv_state_t *state;
|
||||
imv_attestation_state_t *attestation_state;
|
||||
enumerator_t *enumerator;
|
||||
char *files;
|
||||
char *directories;
|
||||
measurement_req_entry_t *entry;
|
||||
char *token;
|
||||
|
||||
if (!imv_attestation)
|
||||
{
|
||||
@@ -91,9 +134,46 @@ TNC_Result TNC_IMV_NotifyConnectionChange(TNC_IMVID imv_id,
|
||||
}
|
||||
state->change_state(state, new_state);
|
||||
attestation_state = (imv_attestation_state_t*)state;
|
||||
/**
|
||||
* do any attestation specific configuration here
|
||||
|
||||
/** Get the files to measure for
|
||||
* PTS Request File Measurement attribute
|
||||
*/
|
||||
|
||||
file_list = linked_list_create();
|
||||
directory_list = linked_list_create();
|
||||
|
||||
files = lib->settings->get_str(lib->settings,
|
||||
"libimcv.plugins.imc-attestation.files", "none");
|
||||
enumerator = enumerator_create_token(files, " ", " ");
|
||||
while (enumerator->enumerate(enumerator, &token))
|
||||
{
|
||||
entry = malloc_thing(measurement_req_entry_t);
|
||||
token = strdup(token);
|
||||
entry->path = token;
|
||||
entry->request_id = request_id_counter;
|
||||
file_list->insert_last(file_list, entry);
|
||||
free(token);
|
||||
request_id_counter ++;
|
||||
}
|
||||
|
||||
/** Get the directories to measure for
|
||||
* PTS Request File Measurement attribute
|
||||
*/
|
||||
|
||||
directories = lib->settings->get_str(lib->settings,
|
||||
"libimcv.plugins.imc-attestation.directories", "none");
|
||||
enumerator = enumerator_create_token(directories, " ", " ");
|
||||
while (enumerator->enumerate(enumerator, &token))
|
||||
{
|
||||
entry = malloc_thing(measurement_req_entry_t);
|
||||
token = strdup(token);
|
||||
entry->path = token;
|
||||
entry->request_id = request_id_counter;
|
||||
directory_list->insert_last(directory_list, entry);
|
||||
free(token);
|
||||
request_id_counter ++;
|
||||
}
|
||||
enumerator->destroy(enumerator);
|
||||
return TNC_RESULT_SUCCESS;
|
||||
default:
|
||||
return imv_attestation->change_state(imv_attestation, connection_id,
|
||||
@@ -106,14 +186,106 @@ static TNC_Result send_message(TNC_ConnectionID connection_id)
|
||||
pa_tnc_msg_t *msg;
|
||||
pa_tnc_attr_t *attr;
|
||||
TNC_Result result;
|
||||
imv_state_t *state;
|
||||
imv_attestation_state_t *attestation_state;
|
||||
imv_attestation_handshake_state_t handshake_state;
|
||||
|
||||
if (!imv_attestation->get_state(imv_attestation, connection_id, &state))
|
||||
{
|
||||
return TNC_RESULT_FATAL;
|
||||
}
|
||||
|
||||
attestation_state = (imv_attestation_state_t*)state;
|
||||
handshake_state = attestation_state->get_handshake_state(attestation_state);
|
||||
|
||||
/* Switch on the attribute type IMV has received */
|
||||
switch (handshake_state)
|
||||
{
|
||||
case IMV_ATTESTATION_STATE_INIT:
|
||||
{
|
||||
/* Send Request Protocol Capabilities attribute */
|
||||
pts_attr_req_proto_caps_flag_t flags;
|
||||
flags = PTS_PROTO_CAPS_T | PTS_PROTO_CAPS_VER | PTS_PROTO_CAPS_CURRENT;
|
||||
attr = tcg_pts_attr_req_proto_caps_create(flags);
|
||||
break;
|
||||
}
|
||||
case IMV_ATTESTATION_STATE_PROTO_CAP:
|
||||
{
|
||||
/* Send Measurement Algorithms attribute */
|
||||
pts_attr_meas_algorithms_t algorithms;
|
||||
algorithms = PTS_MEAS_ALGO_SHA1 | PTS_MEAS_ALGO_SHA256 | PTS_MEAS_ALGO_SHA384;
|
||||
attr = tcg_pts_attr_meas_algo_create(algorithms);
|
||||
break;
|
||||
}
|
||||
case IMV_ATTESTATION_STATE_MEAS_ALGO:
|
||||
{
|
||||
/* Send Get TPM Version Information attribute */
|
||||
attr = tcg_pts_attr_get_tpm_version_info_create();
|
||||
break;
|
||||
}
|
||||
case IMV_ATTESTATION_STATE_TPM_INFO:
|
||||
{
|
||||
/* Send Get AIK attribute */
|
||||
/* TODO: Uncomment when the retrieving of AIK on IMC side is implemented */
|
||||
//attr = tcg_pts_attr_get_aik_create();
|
||||
//break;
|
||||
}
|
||||
case IMV_ATTESTATION_STATE_AIK:
|
||||
{
|
||||
/* Send Request File Measurement attribute */
|
||||
enumerator_t *enumerator;
|
||||
measurement_req_entry_t *entry;
|
||||
char *path;
|
||||
u_int16_t request_id;
|
||||
u_int32_t delimiter = SOLIDUS_UTF;
|
||||
|
||||
msg = pa_tnc_msg_create();
|
||||
|
||||
/** Add files to measure to PTS Request File Measurement attribute
|
||||
*/
|
||||
enumerator = enumerator_create_single(file_list, NULL);
|
||||
while (enumerator->enumerate(enumerator, &entry))
|
||||
{
|
||||
attr = tcg_pts_attr_req_file_meas_create(false,
|
||||
entry.request_id, delimiter,
|
||||
chunk_create(entry.path,strlen(entry.path)));
|
||||
attr->set_noskip_flag(attr, TRUE);
|
||||
msg->add_attribute(msg, attr);
|
||||
}
|
||||
/** Add directories to measure to PTS Request File Measurement attribute
|
||||
*/
|
||||
enumerator = enumerator_create_single(directory_list, NULL);
|
||||
while (enumerator->enumerate(enumerator, &entry))
|
||||
{
|
||||
attr = tcg_pts_attr_req_file_meas_create(true,
|
||||
entry.request_id, delimiter,
|
||||
chunk_create(entry.path,strlen(entry.path)));
|
||||
attr->set_noskip_flag(attr, TRUE);
|
||||
msg->add_attribute(msg, attr);
|
||||
}
|
||||
enumerator->destroy(enumerator);
|
||||
goto end;
|
||||
}
|
||||
case IMV_ATTESTATION_STATE_SIMPLE_COMP_EVID:
|
||||
case IMV_ATTESTATION_STATE_SIMPLE_EVID_FINAL:
|
||||
case IMV_ATTESTATION_STATE_FILE_METADATA:
|
||||
case IMV_ATTESTATION_STATE_FILE_MEAS:
|
||||
case IMV_ATTESTATION_STATE_IML:
|
||||
DBG1(DBG_IMV, "Attestation IMV has nothing to send: \"%s\"", handshake_state);
|
||||
return TNC_RESULT_FATAL;
|
||||
default:
|
||||
DBG1(DBG_IMV, "Attestation IMV is in unknown state: \"%s\"", handshake_state);
|
||||
return TNC_RESULT_FATAL;
|
||||
}
|
||||
|
||||
attr->set_noskip_flag(attr, TRUE);
|
||||
msg = pa_tnc_msg_create();
|
||||
/**
|
||||
* add TCG PTS attributes
|
||||
*/
|
||||
msg->add_attribute(msg, attr);
|
||||
|
||||
end:
|
||||
msg->build(msg);
|
||||
result = imv_attestation->send_message(imv_attestation, connection_id,
|
||||
msg->get_encoding(msg));
|
||||
msg->get_encoding(msg));
|
||||
msg->destroy(msg);
|
||||
|
||||
return result;
|
||||
|
||||
Reference in New Issue
Block a user