denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

transfer IMA file measurements via PA-TNC

Browse Source
This commit is contained in:
Andreas Steffen
2012-07-13 14:46:42 +02:00
parent ecfdce8cb6
commit e0bfc4d63c
6 changed files with 81 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libpts/plugins/imc_attestation/imc_attestation_process.c
+9 -1
View File
@@ -320,6 +320,7 @@ bool imc_attestation_process(pa_tnc_attr_t *attr, linked_list_t *attr_list,
{
tcg_pts_attr_req_func_comp_evid_t *attr_cast;
pts_proto_caps_flag_t negotiated_caps;
pts_file_meas_t *measurements;
pts_comp_func_name_t *name;
pts_comp_evidence_t *evid;
pts_component_t *comp;
@@ -387,12 +388,19 @@ bool imc_attestation_process(pa_tnc_attr_t *attr, linked_list_t *attr_list,
/* do the component evidence measurement[s] */
do
{
status = comp->measure(comp, pts, &evid);
status = comp->measure(comp, pts, &evid, &measurements);
if (status == FAILED)
{
break;
}
attestation_state->add_evidence(attestation_state, evid);
if (measurements)
{
DBG2(DBG_IMC, "collected %d file measurements",
measurements->get_file_count(measurements));
attr = tcg_pts_attr_file_meas_create(measurements);
attr_list->insert_last(attr_list, attr);
}
}
while (status == NEED_MORE);
comp->destroy(comp);
src/libpts/plugins/imv_attestation/imv_attestation_process.c
+27 -14
View File
@@ -193,8 +193,9 @@ bool imv_attestation_process(pa_tnc_attr_t *attr, linked_list_t *attr_list,
int file_count, file_id;
pts_meas_algorithms_t algo;
pts_file_meas_t *measurements;
char *platform_info;
enumerator_t *e_hash;
char *platform_info, *filename;
chunk_t measurement;
enumerator_t *e, *e_hash;
bool is_dir;
platform_info = pts->get_platform_info(pts);
@@ -216,22 +217,34 @@ bool imv_attestation_process(pa_tnc_attr_t *attr, linked_list_t *attr_list,
DBG1(DBG_IMV, "measurement request %d returned %d file%s:",
request_id, file_count, (file_count == 1) ? "":"s");
if (!attestation_state->check_off_file_meas_request(attestation_state,
request_id, &file_id, &is_dir))
if (request_id)
{
DBG1(DBG_IMV, " no entry found for file measurement request %d",
request_id);
break;
}
if (!attestation_state->check_off_file_meas_request(
attestation_state, request_id, &file_id, &is_dir))
{
DBG1(DBG_IMV, " no entry found for file measurement "
"request %d", request_id);
break;
}
/* check hashes from database against measurements */
e_hash = pts_db->create_file_hash_enumerator(pts_db,
platform_info, algo, file_id, is_dir);
if (!measurements->verify(measurements, e_hash, is_dir))
/* check hashes from database against measurements */
e_hash = pts_db->create_file_hash_enumerator(pts_db,
platform_info, algo, file_id, is_dir);
if (!measurements->verify(measurements, e_hash, is_dir))
{
attestation_state->set_measurement_error(attestation_state);
}
e_hash->destroy(e_hash);
}
else
{
attestation_state->set_measurement_error(attestation_state);
e = measurements->create_enumerator(measurements);
while (e->enumerate(e, &filename, &measurement))
{
DBG2(DBG_PTS, " %#B for '%s'", &measurement, filename);
}
e->destroy(e);
}
e_hash->destroy(e_hash);
break;
}
case TCG_PTS_UNIX_FILE_META: