swtpm

swtpm:stable-0.2.0

  1. Git
  2. lp:swtpm
  3. stable-0.2.0
Last commit made on 2020-07-09
Get this branch:
git clone -b stable-0.2.0 https://git.launchpad.net/swtpm

Branch merges

Branch information

Name:
stable-0.2.0
Repository:
lp:swtpm

Recent commits

da0cc18... by Stefan Berger <email address hidden>

rpm/debian: Add 0.2.1-1 entry to changelog

Signed-off-by: Stefan Berger <email address hidden>

193f69e... by Stefan Berger <email address hidden>

CHANGES: Updated CHANGES document for 0.2.1

Signed-off-by: Stefan Berger <email address hidden>

736041a... by Stefan Berger <email address hidden>

tests: Adapt test cases' expected PCR result due to libtpms TPM 2 fix

libtpms version 0.6.3, 0.7.3, and master have a change to the TPM 2 code
that affects the pcrUpdateCounter, which now returns a smaller value than
before.

Signed-off-by: Stefan Berger <email address hidden>

737b39e... by Stefan Berger <email address hidden>

build-sys: build swtpm-0.2.1

Signed-off-by: Stefan Berger <email address hidden>

a3c5bc7... by Stefan Berger <email address hidden>

swtpm_setup: bugfix: Create ECC storage primary key in owner hierarchy

The ECC storage primary key was mistakently created in the endorsement
hierarchy but should be in the owner hierarchy. This patch corrects this
to have this key created in the owner hierarchy (like the RSA key),
thus using 0x40 00 00 01.

This only mattered if one used --create-spk and --ecc together.

Signed-off-by: Stefan Berger <email address hidden>

69e3f79... by Stefan Berger <email address hidden>

swtpm_setup: bugfix: remove tpm2_stirrandom and tpm2_changeeps

Remove tpm2_stirrandom, which we should not need to run on a newly
created TPM 2.
Also remove tpm2_changeeps which was called twice when creating two
EKs, thus invalidating a previous EK that may have been created.

Signed-off-by: Stefan Berger <email address hidden>

ff5a83b... by Stefan Berger

swtpm: Only accept() new client ctrl connection if we have none

Only accept new client connection on the control channel if we
currently do not have a client on the control channel.

Signed-off-by: Stefan Berger <email address hidden>

d8ab4eb... by Stefan Berger

tests: Allow seccomp override w/ SWTPM_TEST_SECCOMP_OPT env var

The Ubuntu (PPA) build system executes the build on an environment that
has problems with seccomp profiles. It does not allow us to run the test
suite with swtpm applying its seccomp profile since it fails with a
'bad system call' error. To work around this we introduce the env. variable
SWTPM_TEST_SECCOMP_OPT that we can set to "--seccomp action=none" to avoid
having swtpm apply it seccomp profile.

Signed-off-by: Stefan Berger <email address hidden>

efaf80b... by Stefan Berger

build-sys: Display check result for build with libseccomp

Display the check result of 'yes' or 'no' for whether we build
with libseccomp.

Signed-off-by: Stefan Berger <email address hidden>

9ceae48... by Stefan Berger

debian: Fix issues reported by lintian and changelog format issues

Fix several issues reported by lintian and the format of
the changelog.

Signed-off-by: Stefan Berger <email address hidden>