Commit graph

75 commits

Author SHA1 Message Date
Peter Robinson
5de6682857 feat: bump version to 0.5.3
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2023-07-28 10:54:36 +01:00
Peter Robinson
62a4685aef chore: add clang-devel for ci build
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2023-07-28 10:54:31 +01:00
Peter Robinson
afff5d8f53 chore: bump tss-esapi crate to 7.2
Bump the tss-esapi to 7.2 for CVE bits, add a generate bindings
feature to ensure it will build on all architectures.

Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2023-07-28 10:43:34 +01:00
Peter Robinson
ba331be121
Merge pull request #21 from sarroutbi/usage_decrypt_option
Correct usage and show decrypt option
2023-07-28 10:39:37 +01:00
Sergio Arroutbi
fd27ca2d20
Include correct usage and show decrypt option
Signed-off-by: Sergio Arroutbi <sarroutb@redhat.com>
2023-05-11 09:29:56 +02:00
Patrick Uiterwijk
9dd15aaac1
Merge pull request #19 from fedora-iot/bump
feat: bump version to 0.5.2
2022-04-20 14:26:31 +02:00
Patrick Uiterwijk
35321c1b72
feat: bump version to 0.5.2
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2022-04-20 14:08:24 +02:00
Patrick Uiterwijk
750b7495e4
Merge pull request #18 from fedora-iot/rebase-tss-70
feat: rebase to tss-esapi 7.0
2022-04-20 14:07:19 +02:00
Patrick Uiterwijk
2622fc93ea
feat: rebase to tss-esapi 7.0
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2022-04-20 13:58:45 +02:00
Patrick Uiterwijk
e2ea458a0b
Merge pull request #17 from puiterwijk/bump
Bump to version 0.5.1
2021-12-10 11:12:23 +01:00
Patrick Uiterwijk
4cbd0b896c
Bump to version 0.5.1
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2021-12-10 11:07:42 +01:00
Peter Robinson
a5741a4cc5
Merge pull request #16 from runcom/license-change
relicense to MIT
2021-12-09 14:04:26 +00:00
Antonio Murdaca
8631be7b50
relicense to MIT
Signed-off-by: Antonio Murdaca <runcom@linux.com>
2021-12-09 12:12:37 +01:00
Patrick Uiterwijk
d483e06098
Bump version to 0.5.0
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2021-12-08 15:34:56 +01:00
Patrick Uiterwijk
27ef7e77c0
Just ignore the alg parameter
Right now, this must be Dir in order to not crash, but after [1] gets
merged, it will have to be A256GCM.
Since we know the algorithm, let's just ignore it.

[1]: https://github.com/hidekatsu-izuno/josekit-rs/pull/12
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2021-12-08 15:28:20 +01:00
Patrick Uiterwijk
cf65a6e208
Re-enable policy test
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2021-12-08 15:24:45 +01:00
Patrick Uiterwijk
961b988627
Skip clevis test during CI
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2021-12-08 15:13:06 +01:00
Patrick Uiterwijk
42ba36aa71
Merge pull request #15 from puiterwijk/integrationtests
Move integration test to rust
2021-12-08 13:38:19 +01:00
Patrick Uiterwijk
be375d1a4c
Move integration test to rust
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2021-12-08 13:33:05 +01:00
Patrick Uiterwijk
9068cd1c07
Fix warnings
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2021-12-08 13:18:27 +01:00
Patrick Uiterwijk
f243c42828
Merge pull request #14 from puiterwijk/cifix
Fix CI
2021-12-08 11:49:59 +01:00
Patrick Uiterwijk
8bec269f71
Merge pull request #12 from puiterwijk/josekit
feat: switch to josekit
2021-12-08 11:49:10 +01:00
Patrick Uiterwijk
1ac3e2a99f
Fix CI
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2021-12-08 11:45:05 +01:00
Patrick Uiterwijk
3ef768fb98
Build as a separate step
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2021-12-08 11:31:28 +01:00
Patrick Uiterwijk
1ec0e4a83f
Merge pull request #13 from puiterwijk/ci
Add GitHub CI
2021-12-08 11:29:18 +01:00
Patrick Uiterwijk
8deda12467
Add GitHub CI
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2021-12-08 11:28:43 +01:00
Patrick Uiterwijk
a0a194a0f9
Add GitHub CI
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2021-12-08 11:26:57 +01:00
Patrick Uiterwijk
0767310e85
feat: switch to josekit
This patch changes from using biscuit to josekit for JWE.
josekit uses OpenSSL for its crypto instead of ring.

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2021-12-08 11:18:55 +01:00
Patrick Uiterwijk
6bcb830067
Merge pull request #11 from fedora-iot/hashfix
fix: use hash for name oject hash alg
2021-12-06 16:28:04 +01:00
Patrick Uiterwijk
3811bffc67
fix: use hash for name oject hash alg
This makes sure we actually use the correct hash algorithm for name alg.

Fixes: #9
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2021-11-03 10:25:49 +01:00
Peter Robinson
7d9daa3b29
Merge pull request #8 from runcom/bump-v0.4.0
Bump to 0.4.0, bump policy to 0.5.1
2021-10-04 12:30:55 +01:00
Antonio Murdaca
f2f15a9165
Bump to 0.4.1, bump policy to 0.5.1
Signed-off-by: Antonio Murdaca <runcom@linux.com>
2021-10-04 13:29:56 +02:00
Peter Robinson
74a320c8d4
Merge pull request #6 from runcom/bump-tss-eapi
bump rust-rss-eapi to 6.1.1, tpm2-policy to 0.5.0
2021-10-01 15:39:15 +01:00
Antonio Murdaca
dcfe2296b3
bump rust-rss-eapi to 6.1.1, tpm2-policy to 0.5.0
Signed-off-by: Antonio Murdaca <runcom@linux.com>
2021-10-01 14:52:50 +02:00
Antonio Murdaca
7170369a14
Merge pull request #7 from puiterwijk/encrypt-decrypt-raw
fix: stop assuming the payload is utf8
2021-10-01 12:09:31 +02:00
Patrick Uiterwijk
3465c80729
fix: stop assuming the payload is utf8
Previously, we were expecting that the input is always utf8 encoded
text.
Since we just convert it to bytes, and print it back out as bytes, we
can just skip the unicode parsing, and accept any provided input.

Fixes: #5
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2021-09-29 13:46:49 +02:00
Peter Robinson
7d211518c1
Merge pull request #4 from nullr0ute/fix-tpm2-policy
Fix the tpm2-policy dep
2021-09-29 12:24:28 +01:00
Peter Robinson
d785af756a Fix the tpm2-policy dep
The tpm2-policy 0.4.0 release has been published so no need to
rely on a local checkout.

Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2021-04-06 12:51:48 +01:00
Patrick Uiterwijk
50babf9b9c Rebase on tss-esapi 5.0 and tpm2-policy 0.4
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2021-04-06 09:45:14 +02:00
Patrick Uiterwijk
8ac7857957 Remove extern crate statements
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2020-12-03 16:46:44 +00:00
Patrick Uiterwijk
480cf9fe29 Add test that no use_policy is not fatal yet
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2020-12-03 16:45:18 +00:00
Patrick Uiterwijk
b78c7d53ed Bump version to 0.2.0
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2020-12-03 16:43:25 +00:00
Patrick Uiterwijk
3dcb2874e0 Add defaults for policy path and pubkey path
This should send people strongly to use the defaults, so that other
tools can easily determine whether policies are in use and what their
values are.
It still allows overriding them.

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2020-12-03 16:42:52 +00:00
Patrick Uiterwijk
9f19dfa344 Rebase on tpm2-policy 0.3.1 for a fix
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2020-12-03 16:59:52 +01:00
Patrick Uiterwijk
130876f40a Re-enable the tests
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2020-12-03 14:30:58 +00:00
Patrick Uiterwijk
176f387e5c Bump version to 0.1.5
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2020-12-03 14:28:59 +00:00
Patrick Uiterwijk
ec1770cdb5 Rebase on tss-esapi 4.0.10-alpha and tpm2-policy 0.3.0
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2020-12-03 14:28:06 +00:00
Patrick Uiterwijk
14d91c28d1 Reformat code with rust fmt
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2020-11-10 10:54:34 +01:00
Patrick Uiterwijk
06b2cd9335 Add fix for extra argument from clevis v15
Clevis v15 added an additional argument, which is either an empty string
or the string "-y".
This argument is not used in this PIN, but we checked the exact number of
arguments to parse, which got changed.
This also accepts more additional arguments, and just ignores them.

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2020-11-10 10:54:01 +01:00
Patrick Uiterwijk
e2f32d0fa0 Support some more weird pcr_id specifications
This change makes it pass all the different possible values provided by the clevis tpm2
pin test suite.

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2020-08-27 14:04:33 +02:00