964de0abde
check IMA file measurements against database reference
2012-07-17 11:16:19 +02:00
c8ff69402b
fixed potential hasher problem in IMA template hash
2012-07-16 22:44:45 +02:00
915bceb4c7
fixed potential hasher problems
2012-07-16 22:39:34 +02:00
358dbe4835
ipsec attest supports ima template hashes
2012-07-16 17:17:08 +02:00
87dd205b61
Add a return value to hasher_t.allocate_hash()
2012-07-16 14:55:06 +02:00
cfd824ccde
Check rng return value when generating nonces in libpts
2012-07-16 14:53:36 +02:00
0f236aacb5
ipsec attest now can measure all files in a directory
2012-07-16 09:54:11 +02:00
12ef9fb1b5
moved listing of file measurements to pts_file_meas
2012-07-16 09:54:11 +02:00
d7a8333c54
moved to debug level 3
2012-07-16 09:54:11 +02:00
e0bfc4d63c
transfer IMA file measurements via PA-TNC
2012-07-13 14:46:42 +02:00
ecfdce8cb6
some more copyright updates
2012-07-13 14:46:42 +02:00
22e97e4f1f
updated Copyright info
2012-07-13 10:42:40 +02:00
dea7d74557
wait for the finalization of the Functional Component measurements
2012-07-13 10:06:43 +02:00
968c83cdeb
restrict PA-TNC messages to maximum size
2012-07-12 21:26:18 +02:00
ea67a75b98
static upper size limit for PA-TNC messages
2012-07-12 21:26:18 +02:00
246c9ad831
imc/imv->send_message() uses attr_list
2012-07-11 23:34:51 +02:00
ee200bab61
use TSS_PCRS_STRUCT_DEFAULT
2012-07-11 17:09:04 +02:00
5b35214a87
check boot_aggregate value
2012-07-11 17:09:04 +02:00
ddafcda4d8
refactored PTS functional component measurements
2012-07-11 17:09:04 +02:00
36df6113fa
added Ubuntu 12.04 LTS i686 measurements
2012-06-28 22:20:44 +02:00
a37f2d2006
certificate_t->issued_by takes an argument to receive signature scheme
2012-06-12 14:24:49 +02:00
86e50bd614
isolate a TNC client if an error occurs
2012-04-22 20:24:59 +02:00
3092bf1090
exit if TBOOT dummy measurements are not defined
2012-04-22 17:40:59 +02:00
1b9c613b77
fixed attest sql query in list_measurements()
2012-02-15 23:13:05 +01:00
a74fab640a
ipsec attest adds and deletes key/component pairs
2012-02-05 22:23:45 +01:00
32aee74c73
check if TNC client has a valid and registered AIK
2012-02-05 19:37:58 +01:00
35a1986142
Fixed additional typos in comments and log messages.
2012-01-12 11:42:42 +01:00
cb4da3f610
register aik certificate via ipsec attest
2011-12-25 14:31:26 +01:00
12b6ba8771
additional state waiting for the EvidenceFinal attribute response
2011-12-20 07:04:21 +01:00
d670adb34a
moved send_message() in front of recommendation evaluation
2011-12-18 21:05:52 +01:00
f994caf665
added case IMV_ATTESTATION_STATE_END
2011-12-18 19:39:25 +01:00
6d3b46668f
TrouSerS expects a bitmask field length of at least 3 bytes
2011-12-18 18:36:36 +01:00
458c52d29d
build PA-TNC message only if there are PA-TNC attributes to send
2011-12-18 17:55:20 +01:00
a98262ff6e
destroy attributes, too
2011-12-18 17:34:53 +01:00
8982b70298
added reference counts to all PA-TNC attribute classes
2011-12-18 17:20:13 +01:00
4f91342702
reworded comments and debug output
2011-12-18 10:51:35 +01:00
5da8b67625
Prepend Debian string to Debian version
2011-12-18 10:27:42 +01:00
6f04ccff5e
added IETF standard error handling method
2011-12-11 09:41:40 +01:00
54f53f9081
implemented IMC/IMV ReceiveMessageLong functions
2011-12-09 23:32:30 +01:00
ac3331e1cd
added IMC/IMV support for send_message_long() and reserve_additional_id() functions
2011-12-09 17:11:31 +01:00
e4e291d499
store the long and excl flags in the connection state
2011-12-09 11:25:53 +01:00
1fe683c1bd
differences incurred by rebasing - thanks Linus
2011-11-28 22:03:46 +01:00
4932278e4b
improved performance of database access by caching primary keys
2011-11-28 21:24:00 +01:00
eba8c01d8b
increased number of PCR registers used by IMA
2011-11-28 21:24:00 +01:00
64d4be9b86
fixed measurement rollback
2011-11-28 21:24:00 +01:00
db08702326
automatically registering component measurements
2011-11-28 21:24:00 +01:00
f2a521e795
bound functional component measurements to AIK
2011-11-28 21:24:00 +01:00
86a6f698cb
implemented Linux IMA functional component
2011-11-28 21:24:00 +01:00
eeefca6b56
defined various measurement hash and pcr functions
2011-11-28 21:24:00 +01:00
057cf96d5b
updated attest_usage text
2011-11-28 21:23:59 +01:00
b448e3ece6
moved attestation plugins to libpts in order to resolve circular reference with libimcv
2011-11-28 21:23:59 +01:00
dac976296c
moved measurement and metadata flags to product_file table
2011-11-28 21:23:59 +01:00
0f706ae40e
generate integrity checksums for libimcv libpts and attest
2011-11-28 21:23:59 +01:00
f275b5432b
slightly refactored ita_comp_tboot
2011-11-28 21:23:24 +01:00
75d7315646
cosmetics in debug output
2011-11-28 21:23:24 +01:00
424d1cbfb0
Check enough data available to read
2011-11-28 21:23:24 +01:00
da1ec62352
handling of missing component measurement
2011-11-28 21:22:51 +01:00
8f1a6d50b4
Added enum names for measurement algorithms
2011-11-28 21:22:51 +01:00
51b0005277
Set pcr transform field depending on measuring algorithm
2011-11-28 21:22:51 +01:00
824a7824dc
sub-component depth from pts database on component evidence request
...
component hashes are entries in file_hashes table
implemented verify function of tboot component
2011-11-28 21:22:51 +01:00
a169fe7793
Fixed memory corruption on tpm version info
2011-11-28 21:22:51 +01:00
1508efdfdf
Fixed warning, freeing tpm context memory in extend_pcr function
2011-11-28 21:22:51 +01:00
3186b04c0b
fixed some more memory leaks
2011-11-28 21:22:51 +01:00
b2485f321d
fixed memory leaks
2011-11-28 21:22:51 +01:00
db103fada4
refactored simple_evid_final attribute
2011-11-28 21:22:51 +01:00
8d851141b7
renamed pts_req_func_comp_evid flags
2011-11-28 21:22:02 +01:00
4e84b5b033
fixed memory leak in tcg_pts_attr_simple_comp_evid.c
2011-11-28 21:22:02 +01:00
19c956b602
refactored PCR functionality
2011-11-28 21:22:02 +01:00
56fd3baa34
fixed two memory leaks
2011-11-28 21:22:01 +01:00
47b019b246
implemented measurement time to utc string conversion functions
2011-11-28 21:22:01 +01:00
cb3ecd5aa5
refactored simple component evidence
2011-11-28 21:22:01 +01:00
21b4efc097
fixed masking of family bits
2011-11-28 21:20:24 +01:00
8c46c649fb
corrected debug groups
2011-11-28 21:20:24 +01:00
d5bde4916a
improved log output of functional component names
2011-11-28 21:20:24 +01:00
a1ac4d5e01
finished refactoring functional components
2011-11-28 21:20:24 +01:00
2efc03758d
adapted database entries
2011-11-28 21:20:24 +01:00
031be70453
fixed output of qualifier flags
2011-11-28 21:20:24 +01:00
f8f1892f78
fixed display of qualifier flags
2011-11-28 21:20:24 +01:00
8ee7e36b66
Factored IMC/V Attestation build/process of Component Functional Name
2011-11-28 21:20:24 +01:00
aee56036ed
cosmetics
2011-11-28 21:20:23 +01:00
f10fc0651e
Fixed the building
2011-11-28 21:20:23 +01:00
0975b00d06
component_hashes new table added
...
measurements added for tboot component
create_comp_hash_enumerator modified accordingly
2011-11-28 21:20:23 +01:00
40cfe6db6a
store functional components in database
2011-11-28 21:20:23 +01:00
17f69fbcb5
fixed output of qualifier flags
2011-11-28 21:20:23 +01:00
3f89e0f792
remomve pts/pts_funct_comp_name.h from Makefile
2011-11-28 21:20:23 +01:00
051dfbd654
object oriented approach to pts functional components
2011-11-28 21:20:23 +01:00
c6beb16689
cosmetics
2011-11-28 21:20:23 +01:00
72e7504919
Changes due to new implementation of Request Functional Component Evidence attribute
2011-11-28 21:20:23 +01:00
42b08a4d05
Functional Component Evidence Request object
2011-11-28 21:20:23 +01:00
77cf6271ad
Using the database entries for generating Functional Component Evidence Requests
...
Using database entries to match received component measurement hashes
2011-11-28 21:20:23 +01:00
b4a9274ce1
Added component column in files table
...
Implemented enumerator getter for generating functional component evidence requests
Implemented enumerator getter for component hashes
2011-11-28 21:20:23 +01:00
413922ff60
Add/CheckOff/Check pending functional component evidence requests
2011-11-28 21:20:23 +01:00
f6aab3cd1e
Implemented TPM_Quote2 on imc and constructing TPM_Quote_Info2 on imv
2011-11-28 21:20:23 +01:00
868c24b2a4
Implemented tboot measurements checking (configure on imc)
2011-11-28 21:20:22 +01:00
2e84538299
Defined functional components within ITA namespace
...
Implemented handling of functional components evidence request/response
2011-11-28 21:19:42 +01:00
824ace105a
Changed the static function name in openssl_rsa_public_key object
...
Removed unused chunk variable from PTS verify_quote_signature function
2011-11-28 21:17:16 +01:00
5fbbfe0a48
use openssl rsa_verify function
2011-11-28 20:31:13 +01:00
379f7a7533
Implemented matching of Optional PCR Composite field value when Hashing was done to reduce the size of it
...
Optional Composite Hash Algorithm field is always present, has value of all zeroes if was not used
2011-11-28 19:51:58 +01:00
06fa9cea8b
added pts_file_type_names
2011-11-28 19:30:53 +01:00
d6b31fa5ab
shortened fieldnames of pts_file_metadata_t struct
2011-11-28 19:29:37 +01:00
898c3f995f
follow strongswan coding rules
2011-11-28 19:24:40 +01:00
06d3485c46
Sort the pcr entries list everytime new entry is added
2011-11-28 19:19:11 +01:00
e0fa29c9a1
Implemented creating and handling of Optional PCR Composite field in Simple Evidence Final attribute
2011-11-28 19:18:23 +01:00
f0a5e5bdac
Construct PCR Composite using information received in Simple Component Evidence attributes
2011-11-28 19:15:13 +01:00
e130cc77ee
Temporary commenting out of processing optional PCR Composite field
2011-11-28 19:12:42 +01:00
60bcdb7452
Used Openssl RSA_verify function
2011-11-28 19:11:47 +01:00
97280c7a47
Fixed calculate quote info function -> initialize PCR bit mask array with zeroes
...
Return TPM Quote Info only, hash of it is calculated in IMV Process
Renamed digest with quote info
2011-11-28 19:10:24 +01:00
db15e3a0d9
Changed definition of pcr_value in pcr_entry_t structure
...
Implemented function to check if recevied PCR after value matches with any configured pcr value
2011-11-28 19:06:35 +01:00
54c0e80f92
Implemented Quote Digest constructing function for IMV
...
Implemented Signature verification function to check TPM Quote Signature
Implemented Handling of Simple Evidence Final attribute
Fixed bug within tpm_quote function
2011-11-28 18:51:08 +01:00
63b0c12f54
Replaced with boolean variable for PCR info included and Evidence Signature included flags
...
Write and Read flags to int first and set flags /Due to special definition/
2011-11-28 18:46:14 +01:00
e8181d7077
Loading AIK Blob from file configured
...
Finalized implementation of quote_tpm function
2011-11-28 18:46:14 +01:00
bae9346a29
Get AIK certificate encoding in PUBKEY_ASN1_DER if it's just public key
2011-11-28 18:44:44 +01:00
c50f881f6a
refactored DH group nonce exchange
2011-11-28 18:25:50 +01:00
4ee4da47f8
normalized pts_dh_group function names
2011-11-28 18:06:48 +01:00
a7e1f37371
added pts_dh_group_select
2011-11-28 18:05:01 +01:00
09f01caf3a
fixed setting of PTS DH group
2011-11-28 18:01:08 +01:00
0788198047
Improved implementation of Read PCR/ Extend PCR/ Quote_TPM functions
...
Implemented creating/handling of Simple Evidence Final attribute (incomplete)
2011-11-28 17:53:34 +01:00
ee6a3bd711
Changed definition of output and set them in quote_tpm function
2011-11-28 17:46:54 +01:00
6c33703c4a
Implemented first version of tpm quote function
2011-11-28 17:43:00 +01:00
c0e4e0a6ab
added newline at end of file
2011-11-28 17:39:53 +01:00
54af64dc10
Changed definition of get_my_pub_val function a little
2011-11-28 17:34:40 +01:00
09f34eb4d0
Implemented functions for reading and extending TPM PCR
...
Made hash_file function a member of pts object
2011-11-28 17:27:58 +01:00
b10465fdc1
Use struct containing the parameters for Create function
...
Deleted unnecessary setter functions
2011-11-28 17:23:52 +01:00
b9d6aded18
Fixed memory leaks
2011-11-28 17:19:40 +01:00
31b1e389ea
Clone chunk_t parameters in create function
2011-11-28 17:11:14 +01:00
be922d56b2
Implemented handling of DH Parameters Response and Finish attributes
...
Implemented calculating session secrets
2011-11-28 16:05:19 +01:00
e3cbd18892
Cloning chunk_t parameters in process message
2011-11-28 15:54:02 +01:00
d83bcc310d
Started implementing handling of DH Nonce attributes
2011-11-28 15:48:38 +01:00
8a55b83319
Implemented Diffie Hellman Nonce attributes
2011-11-28 15:32:36 +01:00
157c9c173d
Write/Read flags field directly to/from variable
2011-11-28 15:18:00 +01:00
d2a905ea98
Began implementing handline of Functional Component Measuring attributes
2011-11-28 15:14:13 +01:00
75d5f6d132
Fixed bug at checking error code from file stat
2011-11-28 15:02:49 +01:00
c5b346d1d0
Implemented handling of File Metadata
2011-11-28 15:01:53 +01:00
1e28c937fe
Fixed bug in construction of PCR_SELECT structure
2011-11-28 14:39:53 +01:00
2aa28b164e
Defined functional components within ITA namespace
...
Implemented handling of functional components evidence request/response
2011-11-28 14:39:53 +01:00
71741df078
Changed the static function name in openssl_rsa_public_key object
...
Removed unused chunk variable from PTS verify_quote_signature function
2011-11-28 14:39:53 +01:00
3cd6077b75
use openssl rsa_verify function
2011-11-28 14:39:53 +01:00
cb66320fee
Implemented matching of Optional PCR Composite field value when Hashing was done to reduce the size of it
...
Optional Composite Hash Algorithm field is always present, has value of all zeroes if was not used
2011-11-28 14:39:53 +01:00
8209ab86a5
free memories that are bound to the context
2011-11-28 14:39:52 +01:00
6c5c5b6a2e
use D flag for PTS Protocol Capabilities
2011-11-28 14:39:52 +01:00
7a40949e18
changed method name to create_file_meas_enumerator
2011-11-28 14:39:52 +01:00
d4171c6ea9
committed missing pts_file_type.c
2011-11-28 14:39:52 +01:00
7b81a60c51
added pts_file_type_names
2011-11-28 14:39:52 +01:00
96d611f585
Unix-Style File Metadata returns relative pathnames
2011-11-28 14:39:52 +01:00
ba361d3cd7
use write_uint64 and read_uint64 in file measurements
2011-11-28 14:39:52 +01:00
63ca82e56d
optimized handling of UNIX file metadata
2011-11-28 14:39:52 +01:00
8ddf76dd13
shortened fieldnames of pts_file_metadata_t struct
2011-11-28 14:39:52 +01:00
b8017b5eba
follow strongswan coding rules
2011-11-28 14:39:52 +01:00
954be9f5e4
Sort the pcr entries list everytime new entry is added
2011-11-28 14:39:52 +01:00
e2d26e47e9
Deleted unnecessary debuggin statements for File Metadata on IMC side
2011-11-28 14:39:51 +01:00
7fa72be3f2
Implemented creating and handling of Optional PCR Composite field in Simple Evidence Final attribute
2011-11-28 14:39:51 +01:00
d6fc5bace3
Construct PCR Composite using information received in Simple Component Evidence attributes
2011-11-28 14:39:51 +01:00
d09cf19716
Temporary commenting out of processing optional PCR Composite field
2011-11-28 14:39:51 +01:00
52ae3f27f8
Used Openssl RSA_verify function
2011-11-28 14:39:51 +01:00
72684a710b
Fixed calculate quote info function -> initialize PCR bit mask array with zeroes
...
Return TPM Quote Info only, hash of it is calculated in IMV Process
Renamed digest with quote info
2011-11-28 14:39:51 +01:00
26b657ce2b
Changed definition of pcr_value in pcr_entry_t structure
...
Implemented function to check if recevied PCR after value matches with any configured pcr value
2011-11-28 14:39:51 +01:00
2eb3dc40b9
return SHA1 hash of TPM Quote Info in calculate_quote_digest
2011-11-28 14:39:51 +01:00
8ed9f5552e
Implemented new create enumerator function to get metadata request paths
...
Modified existing file_enumerator function to include just measurement requests
2011-11-28 14:39:51 +01:00
a8be826be4
Implemented Quote Digest constructing function for IMV
...
Implemented Signature verification function to check TPM Quote Signature
Implemented Handling of Simple Evidence Final attribute
Fixed bug within tpm_quote function
2011-11-28 14:39:50 +01:00
7037b55ff1
Replaced with boolean variable for PCR info included and Evidence Signature included flags
...
Write and Read flags to int first and set flags /Due to special definition/
2011-11-28 14:39:50 +01:00
d25b7b3d9a
Loading AIK Blob from file configured
...
Finalized implementation of quote_tpm function
2011-11-28 14:39:50 +01:00
fe247ba2a6
Get AIK certificate encoding in PUBKEY_ASN1_DER if it's just public key
2011-11-28 14:39:50 +01:00
dc5995fb51
added pts_dh_group_error_create() and pts_dh_nonce_error_create()
2011-11-28 14:39:50 +01:00
5e5d6ecd94
cosmetics
2011-11-28 14:39:50 +01:00
cae9bc9b59
moved comments
2011-11-28 14:39:50 +01:00
cc1406d6fa
refactored DH group nonce exchange
2011-11-28 14:39:50 +01:00
6728e09d39
cosmetics
2011-11-28 14:39:50 +01:00
111ad5cc39
normalized and extended pts_meas_algo functions
2011-11-28 14:39:50 +01:00
f29a36f2a3
renamed conversion function to pts_dh_group_to_ike
2011-11-28 14:39:50 +01:00
2a415e77c7
normalized pts_dh_group function names
2011-11-28 14:39:49 +01:00
3be8995c3e
added pts_dh_group_select
2011-11-28 14:39:49 +01:00
02855188ef
fixed setting of PTS DH group
2011-11-28 14:39:49 +01:00
ea195cb6ef
Changed encoding type to ASN.1 DER
2011-11-28 14:34:21 +01:00
924f3bf59e
Improved implementation of Read PCR/ Extend PCR/ Quote_TPM functions
...
Implemented creating/handling of Simple Evidence Final attribute (incomplete)
2011-11-28 14:34:21 +01:00
e1aebc940a
Removed unnecessary setter functions
2011-11-28 14:34:21 +01:00
768b6b95d7
Fixes for memory leaks
2011-11-28 14:34:21 +01:00
3ca2e65f0d
Freeing memory allocated for AIK after writing
2011-11-28 14:34:21 +01:00
a3be32a2d5
Changed definition of output and set them in quote_tpm function
2011-11-28 14:34:21 +01:00
b46930bf5f
Implemented first version of tpm quote function
2011-11-28 14:34:21 +01:00
c0da11615b
added newline at end of file
2011-11-28 14:34:21 +01:00
a81a5f8bc4
fixed pts_probe_dh_groups warning
2011-11-28 14:34:21 +01:00
ef8ea80a28
Fixed some memory leaks
2011-11-28 14:34:21 +01:00
4b3d992d08
Changed definition of get_my_pub_val function a little
2011-11-28 14:34:21 +01:00
10210cc6e9
Fixed freeing invalid memory issue
2011-11-28 14:34:21 +01:00
f39197dd92
Implemented functions for reading and extending TPM PCR
...
Made hash_file function a member of pts object
2011-11-28 14:34:21 +01:00
7c7034f64c
Use struct containing the parameters for Create function
...
Deleted unnecessary setter functions
2011-11-28 14:34:21 +01:00
97ebeaa45c
Fixed memory leaks
2011-11-28 14:34:20 +01:00
2f229f10b1
Clone chunk_t parameters in create function
2011-11-28 14:34:20 +01:00
c10867f40b
Implemented handling of DH Parameters Response and Finish attributes
...
Implemented calculating session secrets
2011-11-28 14:34:20 +01:00
808017f6b7
Cloning chunk_t parameters in process message
2011-11-28 14:34:20 +01:00
f27c30329d
Fixed bug for updating supported diffie hellman groups
2011-11-28 14:34:20 +01:00
9d7ec5b6cd
Removed unnecessary debug statement
2011-11-28 14:34:20 +01:00
246e46a97c
Return false if mandatory DH Group IKE19 is not available
2011-11-28 14:34:20 +01:00
0daee96b05
Started implementing handling of DH Nonce attributes
2011-11-28 14:34:20 +01:00
9a49d2e065
Implemented Diffie Hellman Nonce attributes
2011-11-28 14:34:20 +01:00
4ec5d26fdf
Write/Read flags field directly to/from variable
2011-11-28 14:34:20 +01:00
1c6ebda3db
Began implementing handline of Functional Component Measuring attributes
2011-11-28 14:34:20 +01:00
9032e61b88
Fixed bug at checking error code from file stat
2011-11-28 14:34:20 +01:00
3e951334a2
Implemented handling of File Metadata
2011-11-28 14:28:00 +01:00
f3eef176f4
Common spelling errors fixed.
2011-11-03 19:30:17 +01:00
Andreas Steffen