denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
7,886 Commits 1 Branch 0 Tags
f4159ff81686f33378d5dd7b7b5d0a1e61fadc93
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sansar Choinyambuu 3cd6077b75 use openssl rsa_verify function 2011-11-28 14:39:53 +01:00
Sansar Choinyambuu cb66320fee Implemented matching of Optional PCR Composite field value when Hashing was done to reduce the size of it 
Optional Composite Hash Algorithm field is always present, has value of all zeroes if was not used
 2011-11-28 14:39:53 +01:00
Sansar Choinyambuu 8209ab86a5 free memories that are bound to the context 2011-11-28 14:39:52 +01:00
Sansar Choinyambuu cb83fb3b72 Both D and T flags required to be set for PTS Component Measurement 
DH Finish is sent only when D flag is set in TPM_INIT phase
 2011-11-28 14:39:52 +01:00
Sansar Choinyambuu 6c5c5b6a2e use D flag for PTS Protocol Capabilities 2011-11-28 14:39:52 +01:00
Sansar Choinyambuu dbe7751a22 Copy just 20 bytes of pcr after value 2011-11-28 14:39:52 +01:00
Sansar Choinyambuu b8017b5eba follow strongswan coding rules 2011-11-28 14:39:52 +01:00
Sansar Choinyambuu 954be9f5e4 Sort the pcr entries list everytime new entry is added 2011-11-28 14:39:52 +01:00
Sansar Choinyambuu b532c454ad Modified some unnecessary todo statement 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 20c005f9e4 Cosmetics 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu e2d26e47e9 Deleted unnecessary debuggin statements for File Metadata on IMC side 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 7fa72be3f2 Implemented creating and handling of Optional PCR Composite field in Simple Evidence Final attribute 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu d6fc5bace3 Construct PCR Composite using information received in Simple Component Evidence attributes 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu d09cf19716 Temporary commenting out of processing optional PCR Composite field 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 52ae3f27f8 Used Openssl RSA_verify function 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 72684a710b Fixed calculate quote info function -> initialize PCR bit mask array with zeroes 
Return TPM Quote Info only, hash of it is calculated in IMV Process
Renamed digest with quote info
 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu baee8292ad Included hasher.h 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 0dd5914cc1 fixed typo in reason strings 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu b8cc499b7e Check if matching value configured with the received pcr after value in Simple Component Evidence 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 26b657ce2b Changed definition of pcr_value in pcr_entry_t structure 
Implemented function to check if recevied PCR after value matches with any configured pcr value
 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu d631a1dda5 deleted unnecessary debuggin statement 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 2eb3dc40b9 return SHA1 hash of TPM Quote Info in calculate_quote_digest 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 67299653e4 Modified reason strings 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 47e5d106a6 Replaced static string path with Metadata requests retrieved from pts database 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu 8ed9f5552e Implemented new create enumerator function to get metadata request paths 
Modified existing file_enumerator function to include just measurement requests
 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu df918eca8d Added measurement and metadata columns to files table 
Added "/etc/tnc_config" file record for metadata request
Modified files table entries with measurement flag set
 2011-11-28 14:39:51 +01:00
Sansar Choinyambuu a8be826be4 Implemented Quote Digest constructing function for IMV 
Implemented Signature verification function to check TPM Quote Signature
Implemented Handling of Simple Evidence Final attribute
Fixed bug within tpm_quote function
 2011-11-28 14:39:50 +01:00
Sansar Choinyambuu 7037b55ff1 Replaced with boolean variable for PCR info included and Evidence Signature included flags 
Write and Read flags to int first and set flags /Due to special definition/
 2011-11-28 14:39:50 +01:00
Sansar Choinyambuu d25b7b3d9a Loading AIK Blob from file configured 
Finalized implementation of quote_tpm function
 2011-11-28 14:39:50 +01:00
Sansar Choinyambuu fe247ba2a6 Get AIK certificate encoding in PUBKEY_ASN1_DER if it's just public key 2011-11-28 14:39:50 +01:00
Sansar Choinyambuu f557e5fcaf Added parentesis for logical conditions of IF statement to get rid of the warning 2011-11-28 14:39:50 +01:00
Sansar Choinyambuu ea195cb6ef Changed encoding type to ASN.1 DER 2011-11-28 14:34:21 +01:00
Sansar Choinyambuu 924f3bf59e Improved implementation of Read PCR/ Extend PCR/ Quote_TPM functions 
Implemented creating/handling of Simple Evidence Final attribute (incomplete)
 2011-11-28 14:34:21 +01:00
Sansar Choinyambuu e1aebc940a Removed unnecessary setter functions 2011-11-28 14:34:21 +01:00
Sansar Choinyambuu 768b6b95d7 Fixes for memory leaks 2011-11-28 14:34:21 +01:00
Sansar Choinyambuu 3ca2e65f0d Freeing memory allocated for AIK after writing 2011-11-28 14:34:21 +01:00
Sansar Choinyambuu a3be32a2d5 Changed definition of output and set them in quote_tpm function 2011-11-28 14:34:21 +01:00
Sansar Choinyambuu 20c70d9839 Use already negotiated Measurement algorithm as Hashing algorithm for Diffie Hellman secret calculation 2011-11-28 14:34:21 +01:00
Sansar Choinyambuu b46930bf5f Implemented first version of tpm quote function 2011-11-28 14:34:21 +01:00
Sansar Choinyambuu ef8ea80a28 Fixed some memory leaks 2011-11-28 14:34:21 +01:00
Sansar Choinyambuu 4b3d992d08 Changed definition of get_my_pub_val function a little 2011-11-28 14:34:21 +01:00
Sansar Choinyambuu 4002b41b92 Added ctime function to white list 2011-11-28 14:34:21 +01:00
Sansar Choinyambuu 10210cc6e9 Fixed freeing invalid memory issue 2011-11-28 14:34:21 +01:00
Sansar Choinyambuu 849b903baa Implemented hasndling of Request Functional Component Evidence and creation of Simple Component Evidences 2011-11-28 14:34:21 +01:00
Sansar Choinyambuu f39197dd92 Implemented functions for reading and extending TPM PCR 
Made hash_file function a member of pts object
 2011-11-28 14:34:21 +01:00
Sansar Choinyambuu 7c7034f64c Use struct containing the parameters for Create function 
Deleted unnecessary setter functions
 2011-11-28 14:34:21 +01:00
Sansar Choinyambuu 97ebeaa45c Fixed memory leaks 2011-11-28 14:34:20 +01:00
Sansar Choinyambuu 2f229f10b1 Clone chunk_t parameters in create function 2011-11-28 14:34:20 +01:00
Sansar Choinyambuu c10867f40b Implemented handling of DH Parameters Response and Finish attributes 
Implemented calculating session secrets
 2011-11-28 14:34:20 +01:00
Sansar Choinyambuu a2ca89676b Replaced DH_NONCE state with TPM_INIT state 2011-11-28 14:34:20 +01:00
Sansar Choinyambuu 808017f6b7 Cloning chunk_t parameters in process message 2011-11-28 14:34:20 +01:00
Sansar Choinyambuu f27c30329d Fixed bug for updating supported diffie hellman groups 2011-11-28 14:34:20 +01:00
Sansar Choinyambuu 9d7ec5b6cd Removed unnecessary debug statement 2011-11-28 14:34:20 +01:00
Sansar Choinyambuu 246e46a97c Return false if mandatory DH Group IKE19 is not available 2011-11-28 14:34:20 +01:00
Sansar Choinyambuu 0daee96b05 Started implementing handling of DH Nonce attributes 2011-11-28 14:34:20 +01:00
Sansar Choinyambuu 9a49d2e065 Implemented Diffie Hellman Nonce attributes 2011-11-28 14:34:20 +01:00
Sansar Choinyambuu 4ec5d26fdf Write/Read flags field directly to/from variable 2011-11-28 14:34:20 +01:00
Sansar Choinyambuu 1c6ebda3db Began implementing handline of Functional Component Measuring attributes 2011-11-28 14:34:20 +01:00
Sansar Choinyambuu 9032e61b88 Fixed bug at checking error code from file stat 2011-11-28 14:34:20 +01:00
Sansar Choinyambuu 3e951334a2 Implemented handling of File Metadata 2011-11-28 14:28:00 +01:00
Sansar Choinyambuu d22716509a File not Found, Invalid path, Invalid Delimiter PTS errors case checks implemented 2011-11-28 14:28:00 +01:00
Sansar Choinyambuu d883495418 Implemented PTS attributes Request File Metadata, Unix-Style File Metadata 2011-09-10 22:39:55 +02:00
Sansar Choinyambuu 31ac5b0d6b File not Found, Invalid path, Invalid Delimiter PTS errors case checks implemented 2011-09-10 22:39:55 +02:00
Sansar Choinyambuu af275f3fdb Added Check_Measurement function to pts_database instead of returning enumerator over hashes 
List of requested files/directories are kept within imv state now
Allocated memory for entries in files_in_dir_with_meas list
 2011-09-08 12:17:08 +02:00
Sansar Choinyambuu e9fd8b4b7b Added Check_Measurement function to pts_database instead of returning enumerator over hashes 
List of requested files/directories are kept within imv state now
Allocated memory for entries in files_in_dir_with_meas list
 2011-09-08 12:13:10 +02:00
Sansar Choinyambuu 1c10fb59bf Added destroy functions for linked lists 2011-09-08 12:08:17 +02:00
Sansar Choinyambuu 6ef5c05829 Verification of directory contents measurements implemented 2011-09-08 12:08:17 +02:00
Sansar Choinyambuu 35cd6ec43c Added measurements for libxt_udp.so and libxt_tcp.so to check dir measuring 2011-09-08 12:08:16 +02:00
Sansar Choinyambuu a08796a5c3 Added directory column with default value of zero into file_hashes table 2011-09-08 12:08:16 +02:00
Sansar Choinyambuu 517c372a5a Inserted missing "!" mark 
Changed variable name for AIK cert, key paths in strongswan.conf
 2011-09-08 12:08:16 +02:00
Sansar Choinyambuu 70f8d3242a Removed identity.c related references and variables 2011-09-08 12:08:16 +02:00
Sansar Choinyambuu 63b7b6e322 Delete unnecessary fake_ek_cert header file 2011-09-08 12:08:16 +02:00
Sansar Choinyambuu 9816a29822 Read AIK certificate/ AIK public key from file 2011-09-08 12:08:16 +02:00
Sansar Choinyambuu 05a1b347b2 Enforced strongSwan coding rules (tab, if, {) 2011-09-08 12:08:16 +02:00
Sansar Choinyambuu 0f36d4815e Initialized ekcertlen with 0 2011-09-08 12:08:16 +02:00
Sansar Choinyambuu 8ab124a2f7 removed static keyword 2011-09-08 12:08:16 +02:00
Sansar Choinyambuu 29505b2cd6 added fake_ek_cert.h to makefile.am 2011-09-08 12:08:16 +02:00
Sansar Choinyambuu 4fa364193c Included fake_ek_cert header back 2011-09-08 12:08:16 +02:00
Sansar Choinyambuu 30fa35eec5 Added fake_ek_cert.h 2011-09-08 12:08:15 +02:00
Sansar Choinyambuu f4527909f2 Obtain AIK and exchange as PEM certificate done 
Fixed the trashy tail of last file name in Request File Measurement
 2011-09-08 12:08:15 +02:00
Sansar Choinyambuu 90c963439e Started implementing obtaining of AIK 2011-09-08 12:08:15 +02:00
Sansar Choinyambuu 46fd48797d Restore flag calculation 2011-09-08 12:08:14 +02:00
Sansar Choinyambuu b460d5f5ce Reading and writing flags directly 2011-09-08 12:08:14 +02:00
Sansar Choinyambuu f4cc834c45 SHA384 is set as strongest hashing algorithm 2011-09-08 12:08:14 +02:00
Sansar Choinyambuu 6434d41fa5 Added empty getter/setter for AIK 2011-09-08 12:08:14 +02:00
Sansar Choinyambuu 86f1cd15b8 Deleted switch statement for hashing algorithms, using the integer field directly for the query 2011-09-08 12:08:14 +02:00
Sansar Choinyambuu 2db719a509 Replaced reason strings with temporary ones for File Measurement Comparison 2011-09-08 12:08:14 +02:00
Sansar Choinyambuu 6d9e319dd7 Provide recommendation after all received attributes are handled 2011-09-08 12:08:14 +02:00
Sansar Choinyambuu 8ada2b68a3 Clone the path chunk before adding to measurements list 2011-09-08 12:08:14 +02:00
Sansar Choinyambuu cd669535e6 Destroy meas_enumerator 2011-09-08 12:08:14 +02:00
Sansar Choinyambuu f36ef96ed4 Added create_meas_enumerator function to pts_database object 
Implemented handling part of File Measurement attributes reception
Ending the exchange and allowing access if all measurements match with database isolate if not
 2011-09-08 12:08:14 +02:00
Sansar Choinyambuu 08a7bd530e Corrected output length for SHA256 algorithm 2011-09-08 12:08:14 +02:00
Sansar Choinyambuu aab0c587db Deleted filter for measurement enumerator 2011-09-08 12:08:14 +02:00
Sansar Choinyambuu f2f18b4e2f The file and directory lists are queried from db 
Request File Measurements sending and handling is implemented accordingly
Measuring the file and directories are tested
 2011-09-08 12:08:14 +02:00
Sansar Choinyambuu 85ab2fc2a3 Deleted unnecessary debug statement 2011-09-08 12:08:13 +02:00
Sansar Choinyambuu 403409cbda Corrected typo on product_file table 2011-09-08 12:08:13 +02:00
Sansar Choinyambuu 23f1509c4f chunk_clone after read_data 2011-09-08 12:08:13 +02:00
Sansar Choinyambuu f3aeb40bf1 Removed unnecessary struct 2011-09-08 12:08:13 +02:00
Sansar Choinyambuu 14ed35c52e Corrected typo in query 2011-09-08 12:08:13 +02:00
Sansar Choinyambuu 20077abea2 Changes according to db implementation 2011-09-08 12:08:13 +02:00