denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Check if matching value configured with the received pcr after value in Simple Component Evidence

Browse Source
This commit is contained in:
Sansar Choinyambuu
2011-11-28 14:39:51 +01:00
committed by Andreas Steffen
parent 26b657ce2b
commit b8cc499b7e
1 changed files with 13 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libimcv/plugins/imv_attestation/imv_attestation_process.c
+13 -4
View File
@@ -249,6 +249,15 @@ bool imv_attestation_process(pa_tnc_attr_t *attr, linked_list_t *attr_list,
pcr_before = attr_cast->get_pcr_before_value(attr_cast); pcr_before = attr_cast->get_pcr_before_value(attr_cast);
pcr_after = attr_cast->get_pcr_after_value(attr_cast); pcr_after = attr_cast->get_pcr_after_value(attr_cast);
measurement = attr_cast->get_comp_measurement(attr_cast); measurement = attr_cast->get_comp_measurement(attr_cast);
DBG3(DBG_IMV,"PCR: %d was extended with %B", extended_pcr, &measurement);
DBG3(DBG_IMV,"PCR: %d before value: %B", extended_pcr, &pcr_before);
DBG3(DBG_IMV,"PCR: %d after value: %B", extended_pcr, &pcr_after);
if (!pts->does_pcr_value_match(pts, pcr_after))
{
return FALSE;
}
} }
if (flags != PTS_SIMPLE_COMP_EVID_FLAG_NO_VALID) if (flags != PTS_SIMPLE_COMP_EVID_FLAG_NO_VALID)
{ {
@@ -292,12 +301,12 @@ bool imv_attestation_process(pa_tnc_attr_t *attr, linked_list_t *attr_list,
if (!pts->get_quote_digest(pts, &digest)) if (!pts->get_quote_digest(pts, &digest))
{ {
DBG1(DBG_IMV, "unable to contruct TPM Quote Digest"); DBG1(DBG_IMV, "unable to contruct TPM Quote Digest");
chunk_clear(&digest); free(digest.ptr);
return FALSE; return FALSE;
} }
if (!pts->verify_quote_signature(pts, digest, tpm_quote_sign)) if (!pts->verify_quote_signature(pts, digest, tpm_quote_sign))
{ {
chunk_clear(&digest); free(digest.ptr);
return FALSE; return FALSE;
} }
@@ -308,9 +317,9 @@ bool imv_attestation_process(pa_tnc_attr_t *attr, linked_list_t *attr_list,
DBG1(DBG_IMV, "calculated TPM Quote Info differs from received"); DBG1(DBG_IMV, "calculated TPM Quote Info differs from received");
DBG1(DBG_IMV, "calculated: %B", &digest); DBG1(DBG_IMV, "calculated: %B", &digest);
DBG1(DBG_IMV, "received: %B", &pcr_comp); DBG1(DBG_IMV, "received: %B", &pcr_comp);
chunk_clear(&digest); return FALSE;
} }
chunk_clear(&digest); free(digest.ptr);
} }
if (evid_signature_included) if (evid_signature_included)