denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
15,415 Commits 1 Branch 0 Tags
a6dc7bf287c0d6bd792cc2fb2ca91d2fdc9448db
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sansar Choinyambuu 6d3b46668f TrouSerS expects a bitmask field length of at least 3 bytes 2011-12-18 18:36:36 +01:00
Sansar Choinyambuu 424d1cbfb0 Check enough data available to read 2011-11-28 21:23:24 +01:00
Sansar Choinyambuu da1ec62352 handling of missing component measurement 2011-11-28 21:22:51 +01:00
Sansar Choinyambuu 8f1a6d50b4 Added enum names for measurement algorithms 2011-11-28 21:22:51 +01:00
Sansar Choinyambuu 51b0005277 Set pcr transform field depending on measuring algorithm 2011-11-28 21:22:51 +01:00
Sansar Choinyambuu 824a7824dc sub-component depth from pts database on component evidence request 
component hashes are entries in file_hashes table
implemented verify function of tboot component
 2011-11-28 21:22:51 +01:00
Sansar Choinyambuu a169fe7793 Fixed memory corruption on tpm version info 2011-11-28 21:22:51 +01:00
Sansar Choinyambuu 1508efdfdf Fixed warning, freeing tpm context memory in extend_pcr function 2011-11-28 21:22:51 +01:00
Sansar Choinyambuu 8ee7e36b66 Factored IMC/V Attestation build/process of Component Functional Name 2011-11-28 21:20:24 +01:00
Sansar Choinyambuu aee56036ed cosmetics 2011-11-28 21:20:23 +01:00
Sansar Choinyambuu f10fc0651e Fixed the building 2011-11-28 21:20:23 +01:00
Sansar Choinyambuu 0975b00d06 component_hashes new table added 
measurements added for tboot component
create_comp_hash_enumerator modified accordingly
 2011-11-28 21:20:23 +01:00
Sansar Choinyambuu 72e7504919 Changes due to new implementation of Request Functional Component Evidence attribute 2011-11-28 21:20:23 +01:00
Sansar Choinyambuu 42b08a4d05 Functional Component Evidence Request object 2011-11-28 21:20:23 +01:00
Sansar Choinyambuu 4beaa7ec7e Print matching measurements of a component just once 2011-11-28 21:20:23 +01:00
Sansar Choinyambuu 8c1ff26015 use chunk_from_hex function 2011-11-28 21:20:23 +01:00
Sansar Choinyambuu 77cf6271ad Using the database entries for generating Functional Component Evidence Requests 
Using database entries to match received component measurement hashes
 2011-11-28 21:20:23 +01:00
Sansar Choinyambuu b4a9274ce1 Added component column in files table 
Implemented enumerator getter for generating functional component evidence requests
Implemented enumerator getter for component hashes
 2011-11-28 21:20:23 +01:00
Sansar Choinyambuu 79e3859bf1 Added measurements for tboot PCR17 and PCR18 on Ubuntu 10.10 x86_64 2011-11-28 21:20:23 +01:00
Sansar Choinyambuu e46f4b5476 Modified reason strings 2011-11-28 21:20:23 +01:00
Sansar Choinyambuu 413922ff60 Add/CheckOff/Check pending functional component evidence requests 2011-11-28 21:20:23 +01:00
Sansar Choinyambuu f6aab3cd1e Implemented TPM_Quote2 on imc and constructing TPM_Quote_Info2 on imv 2011-11-28 21:20:23 +01:00
Sansar Choinyambuu 868c24b2a4 Implemented tboot measurements checking (configure on imc) 2011-11-28 21:20:22 +01:00
Sansar Choinyambuu 2e84538299 Defined functional components within ITA namespace 
Implemented handling of functional components evidence request/response
 2011-11-28 21:19:42 +01:00
Sansar Choinyambuu 95e37555c3 Reverse the changes made to openssl plugin for signature verification 2011-11-28 21:18:05 +01:00
Sansar Choinyambuu a66719d7d6 Reversed unintended commit 2011-11-28 21:17:16 +01:00
Sansar Choinyambuu 824ace105a Changed the static function name in openssl_rsa_public_key object 
Removed unused chunk variable from PTS verify_quote_signature function
 2011-11-28 21:17:16 +01:00
Sansar Choinyambuu 5fbbfe0a48 use openssl rsa_verify function 2011-11-28 20:31:13 +01:00
Sansar Choinyambuu 379f7a7533 Implemented matching of Optional PCR Composite field value when Hashing was done to reduce the size of it 
Optional Composite Hash Algorithm field is always present, has value of all zeroes if was not used
 2011-11-28 19:51:58 +01:00
Sansar Choinyambuu 898c3f995f follow strongswan coding rules 2011-11-28 19:24:40 +01:00
Sansar Choinyambuu 06d3485c46 Sort the pcr entries list everytime new entry is added 2011-11-28 19:19:11 +01:00
Sansar Choinyambuu e0fa29c9a1 Implemented creating and handling of Optional PCR Composite field in Simple Evidence Final attribute 2011-11-28 19:18:23 +01:00
Sansar Choinyambuu f0a5e5bdac Construct PCR Composite using information received in Simple Component Evidence attributes 2011-11-28 19:15:13 +01:00
Sansar Choinyambuu e130cc77ee Temporary commenting out of processing optional PCR Composite field 2011-11-28 19:12:42 +01:00
Sansar Choinyambuu 60bcdb7452 Used Openssl RSA_verify function 2011-11-28 19:11:47 +01:00
Sansar Choinyambuu 97280c7a47 Fixed calculate quote info function -> initialize PCR bit mask array with zeroes 
Return TPM Quote Info only, hash of it is calculated in IMV Process
Renamed digest with quote info
 2011-11-28 19:10:24 +01:00
Sansar Choinyambuu db15e3a0d9 Changed definition of pcr_value in pcr_entry_t structure 
Implemented function to check if recevied PCR after value matches with any configured pcr value
 2011-11-28 19:06:35 +01:00
Sansar Choinyambuu 54c0e80f92 Implemented Quote Digest constructing function for IMV 
Implemented Signature verification function to check TPM Quote Signature
Implemented Handling of Simple Evidence Final attribute
Fixed bug within tpm_quote function
 2011-11-28 18:51:08 +01:00
Sansar Choinyambuu 63b0c12f54 Replaced with boolean variable for PCR info included and Evidence Signature included flags 
Write and Read flags to int first and set flags /Due to special definition/
 2011-11-28 18:46:14 +01:00
Sansar Choinyambuu e8181d7077 Loading AIK Blob from file configured 
Finalized implementation of quote_tpm function
 2011-11-28 18:46:14 +01:00
Sansar Choinyambuu bae9346a29 Get AIK certificate encoding in PUBKEY_ASN1_DER if it's just public key 2011-11-28 18:44:44 +01:00
Sansar Choinyambuu 0788198047 Improved implementation of Read PCR/ Extend PCR/ Quote_TPM functions 
Implemented creating/handling of Simple Evidence Final attribute (incomplete)
 2011-11-28 17:53:34 +01:00
Sansar Choinyambuu ee6a3bd711 Changed definition of output and set them in quote_tpm function 2011-11-28 17:46:54 +01:00
Sansar Choinyambuu 6c33703c4a Implemented first version of tpm quote function 2011-11-28 17:43:00 +01:00
Sansar Choinyambuu 54af64dc10 Changed definition of get_my_pub_val function a little 2011-11-28 17:34:40 +01:00
Sansar Choinyambuu 0bfdae3b90 Implemented hasndling of Request Functional Component Evidence and creation of Simple Component Evidences 2011-11-28 17:30:17 +01:00
Sansar Choinyambuu 09f34eb4d0 Implemented functions for reading and extending TPM PCR 
Made hash_file function a member of pts object
 2011-11-28 17:27:58 +01:00
Sansar Choinyambuu b10465fdc1 Use struct containing the parameters for Create function 
Deleted unnecessary setter functions
 2011-11-28 17:23:52 +01:00
Sansar Choinyambuu b9d6aded18 Fixed memory leaks 2011-11-28 17:19:40 +01:00
Sansar Choinyambuu 31b1e389ea Clone chunk_t parameters in create function 2011-11-28 17:11:14 +01:00
Sansar Choinyambuu be922d56b2 Implemented handling of DH Parameters Response and Finish attributes 
Implemented calculating session secrets
 2011-11-28 16:05:19 +01:00
Sansar Choinyambuu e3cbd18892 Cloning chunk_t parameters in process message 2011-11-28 15:54:02 +01:00
Sansar Choinyambuu d83bcc310d Started implementing handling of DH Nonce attributes 2011-11-28 15:48:38 +01:00
Sansar Choinyambuu 8a55b83319 Implemented Diffie Hellman Nonce attributes 2011-11-28 15:32:36 +01:00
Sansar Choinyambuu 157c9c173d Write/Read flags field directly to/from variable 2011-11-28 15:18:00 +01:00
Sansar Choinyambuu d2a905ea98 Began implementing handline of Functional Component Measuring attributes 2011-11-28 15:14:13 +01:00
Sansar Choinyambuu 75d5f6d132 Fixed bug at checking error code from file stat 2011-11-28 15:02:49 +01:00
Sansar Choinyambuu c5b346d1d0 Implemented handling of File Metadata 2011-11-28 15:01:53 +01:00
Sansar Choinyambuu 381b3452f3 File not Found, Invalid path, Invalid Delimiter PTS errors case checks implemented 2011-11-28 14:41:27 +01:00
Sansar Choinyambuu 1e28c937fe Fixed bug in construction of PCR_SELECT structure 2011-11-28 14:39:53 +01:00
Sansar Choinyambuu 2aa28b164e Defined functional components within ITA namespace 
Implemented handling of functional components evidence request/response
 2011-11-28 14:39:53 +01:00
Sansar Choinyambuu 19fa287f6e Reverse the changes made to openssl plugin for signature verification 2011-11-28 14:39:53 +01:00
Sansar Choinyambuu 103218b912 Reversed unintended commit 2011-11-28 14:39:53 +01:00
Sansar Choinyambuu 71741df078 Changed the static function name in openssl_rsa_public_key object 
Removed unused chunk variable from PTS verify_quote_signature function
 2011-11-28 14:39:53 +01:00
Sansar Choinyambuu 3cd6077b75 use openssl rsa_verify function 2011-11-28 14:39:53 +01:00
Sansar Choinyambuu cb66320fee Implemented matching of Optional PCR Composite field value when Hashing was done to reduce the size of it 
Optional Composite Hash Algorithm field is always present, has value of all zeroes if was not used
 2011-11-28 14:39:53 +01:00
Sansar Choinyambuu 8209ab86a5 free memories that are bound to the context 2011-11-28 14:39:52 +01:00
Sansar Choinyambuu cb83fb3b72 Both D and T flags required to be set for PTS Component Measurement 
DH Finish is sent only when D flag is set in TPM_INIT phase
 2011-11-28 14:39:52 +01:00
Sansar Choinyambuu 6c5c5b6a2e use D flag for PTS Protocol Capabilities 2011-11-28 14:39:52 +01:00
Sansar Choinyambuu dbe7751a22 Copy just 20 bytes of pcr after value 2011-11-28 14:39:52 +01:00
Sansar Choinyambuu b8017b5eba follow strongswan coding rules 2011-11-28 14:39:52 +01:00
Sansar Choinyambuu 954be9f5e4 Sort the pcr entries list everytime new entry is added 2011-11-28 14:39:52 +01:00
Sansar Choinyambuu b532c454ad Modified some unnecessary todo statement 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 20c005f9e4 Cosmetics 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu e2d26e47e9 Deleted unnecessary debuggin statements for File Metadata on IMC side 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 7fa72be3f2 Implemented creating and handling of Optional PCR Composite field in Simple Evidence Final attribute 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu d6fc5bace3 Construct PCR Composite using information received in Simple Component Evidence attributes 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu d09cf19716 Temporary commenting out of processing optional PCR Composite field 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 52ae3f27f8 Used Openssl RSA_verify function 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 72684a710b Fixed calculate quote info function -> initialize PCR bit mask array with zeroes 
Return TPM Quote Info only, hash of it is calculated in IMV Process
Renamed digest with quote info
 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu baee8292ad Included hasher.h 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 0dd5914cc1 fixed typo in reason strings 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu b8cc499b7e Check if matching value configured with the received pcr after value in Simple Component Evidence 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 26b657ce2b Changed definition of pcr_value in pcr_entry_t structure 
Implemented function to check if recevied PCR after value matches with any configured pcr value
 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu d631a1dda5 deleted unnecessary debuggin statement 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 2eb3dc40b9 return SHA1 hash of TPM Quote Info in calculate_quote_digest 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 67299653e4 Modified reason strings 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 47e5d106a6 Replaced static string path with Metadata requests retrieved from pts database 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 8ed9f5552e Implemented new create enumerator function to get metadata request paths 
Modified existing file_enumerator function to include just measurement requests
 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu df918eca8d Added measurement and metadata columns to files table 
Added "/etc/tnc_config" file record for metadata request
Modified files table entries with measurement flag set
 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu a8be826be4 Implemented Quote Digest constructing function for IMV 
Implemented Signature verification function to check TPM Quote Signature
Implemented Handling of Simple Evidence Final attribute
Fixed bug within tpm_quote function
 2011-11-28 14:39:50 +01:00
Sansar Choinyambuu 7037b55ff1 Replaced with boolean variable for PCR info included and Evidence Signature included flags 
Write and Read flags to int first and set flags /Due to special definition/
 2011-11-28 14:39:50 +01:00
Sansar Choinyambuu d25b7b3d9a Loading AIK Blob from file configured 
Finalized implementation of quote_tpm function
 2011-11-28 14:39:50 +01:00
Sansar Choinyambuu fe247ba2a6 Get AIK certificate encoding in PUBKEY_ASN1_DER if it's just public key 2011-11-28 14:39:50 +01:00
Sansar Choinyambuu f557e5fcaf Added parentesis for logical conditions of IF statement to get rid of the warning 2011-11-28 14:39:50 +01:00
Sansar Choinyambuu ea195cb6ef Changed encoding type to ASN.1 DER 2011-11-28 14:34:21 +01:00
Sansar Choinyambuu 924f3bf59e Improved implementation of Read PCR/ Extend PCR/ Quote_TPM functions 
Implemented creating/handling of Simple Evidence Final attribute (incomplete)
 2011-11-28 14:34:21 +01:00
Sansar Choinyambuu e1aebc940a Removed unnecessary setter functions 2011-11-28 14:34:21 +01:00
Sansar Choinyambuu 768b6b95d7 Fixes for memory leaks 2011-11-28 14:34:21 +01:00
Sansar Choinyambuu 3ca2e65f0d Freeing memory allocated for AIK after writing 2011-11-28 14:34:21 +01:00