Provider for Plainbox - TPM2

~jocave/plainbox-provider-tpm2:modify-manifest-wording

  1. Git
  2. lp:~jocave/plainbox-provider-tpm2
  3. modify-manifest-wording
Last commit made on 2021-04-27
Get this branch:
git clone -b modify-manifest-wording https://git.launchpad.net/~jocave/plainbox-provider-tpm2
Only Jonathan Cave can upload to this branch. If you are Jonathan Cave please log in for upload directions.

Branch merges

Branch information

Name:
modify-manifest-wording
Repository:
lp:~jocave/plainbox-provider-tpm2

Recent commits

bb051b8... by Jonathan Cave

Change: manifest wording from chip to support

Modify the manifest entry wording as we do not differentiate
between a device having a discrete hardware TPM and firmware TPM support.

8baba1b... by PMR <pmr@pmr-lander>

Merge #397419 from ~ivan.hu/plainbox-provider-tpm2:sha1PCR

Recently, most platforms which default don't support sha1 pcr band and can be changed on the bios setup menu. Sha1 PCR band is not mandatory from the TCG TPM spec. So, modify some tests for not getting lots of failures on those platforms which sha1 PCR band is not default supported.

* helpers.sh: add helper function for check sha1 pcr support
* skip/modify tests related to sha1 pcr band

cb3e835... by Ivan Hu

pm2.0_4.1.1: modify some tests for the platforms without sha1 pcr band

Most platforms which default don't support sha1 pcr band and can be
changed on the bios setup menu. Sha1 pcr band is not mandatory from
the TCG TPM spec. So, modify some tests for not getting lots of failures
on those platforms which sha1 pcr band is not default supported.

* helpers.sh: add helper function for check sha1 pcr support
* skip/modify tests related to sha1 pcr band.

Signed-off-by: Ivan Hu <email address hidden>

6a0a73a... by PMR <pmr@pmr-lander>

Merge #396891 from plainbox-provider-tpm2:release

Release_2021_Week4

52f96b4... by PMR <pmr@pmr-lander>

increment version to v1.16.0.dev0

618e560... by PMR <pmr@pmr-lander>

Bump to v1.15.0

5d6f2ea... by PMR <pmr@pmr-lander>

Bump to v1.15.0rc1

b4785a9... by PMR <pmr@pmr-lander>

Merge #396121 from ~ivan.hu/plainbox-provider-tpm2:checkgapmax

From the TCG spec "Trusted Platform Module Library Part 2: Structures", TPM_PT_CONTEXT_GAP_MAX the maximum allowed difference (unsigned) between the contextID values of two saved session contexts.
This value shall be 2^n-1, where n is at least 16. Which means the value should be at least 0xFFFF

Currently, there are lots of machines which TPM hasn't followed the specification, and only has the value 0xFF.

Add checking the TPM_PT_CONTEXT_GAP_MAX value.

82f3cf4... by Ivan Hu

tpm2.0_4.1.1: add checking the TPM_PT_CONTEXT_GAP_MAX value

From the TCG spec "Trusted Platform Module Library Part 2: Structures",
TPM_PT_CONTEXT_GAP_MAX the maximum allowed difference (unsigned) between
the contextID values of two saved session contexts.
This value shall be 2^n-1, where n is at least 16.
Which means the value should be at least 0xFFFF

Currently, there are lots of machines which TPM hasn't followed the
specification, and only has the value 0xFF.

Add checking the TPM_PT_CONTEXT_GAP_MAX value.

Signed-off-by: Ivan Hu <email address hidden>

713ea5f... by PMR <pmr@pmr-lander>

Merge #395888 from ~ivan.hu/plainbox-provider-tpm2:flushcontext

Some machines which only support TPM_PT_CONTEXT_GAP_MAX to 0xFF.
It causes the tpm2 context reached the limitation value.
And got tests freeze or got lots failures returned.
Adding flushcontext to avoid reached the limitaiton.