3cec8e2076
NOISSUE - Update the attestation policy JSON files for AMD and Intel ( #496 )
...
* update attestation policy
* add empty line
2025-08-13 12:04:22 +02:00
f543cb4363
COCOS-456 Remove SEV support from repo ( #472 )
...
* Remove SEV support from repo
* Remove SEV references
2025-07-10 10:58:36 +02:00
293c65a3aa
NOISSUE - Add path to expected PCR values ( #398 )
...
CI / ci (push) Has been cancelled
Rust CI Pipeline / rust-check (push) Has been cancelled
* add path to expected PCR values
* change rust scrtip for attestation policy to print policy to stdout
* fix cli test
* remove stdout from cmd config struct
* fix manager test
* fix manager readme
2025-03-17 12:25:42 +01:00
4bb732ebf9
Add igvm measurement ( #379 )
...
Add copyright information to package
Add testing to igvm measurements
Remove trailing white space
Improve testing
Resolve PR comments
Add measure to cli
Add README for feature
Fix PR comments
Added new line to shell script
Add measurement interface
Fix ci
Refactor code for IgvmMeasurement to become a CLI dependency
Refactor code for IgvmMeasurement to become a CLI dependency
Refactor based on ci failures
Fix error handling
Add header
Fix ci
2025-03-12 10:24:51 +01:00
67f939fc66
COCOS-326 - Add vTPM support to CoCoS ( #376 )
...
CI / checkproto (push) Has been cancelled
CI / ci (push) Has been cancelled
Rust CI Pipeline / rust-check (push) Has been cancelled
* manager, cli and agent vtpm support
* rebase and changed atls for vtpm
* deleted unused code
* changed chekproto.yaml script so it find the manager proto file correctly
* fixe manager proto version
* fix agent tests
* fix server agent test
* fix attestation test
* fix attestation test gofumpt
* created dummy RWC for TPM
* fix comment
* add default PCR values
* rebase main
* fix rust ci and missing header
* changed embedded attestation to VMPL 2
* fix unused impot
* fix pkg test
* address attestation type
* fix agent attestation test
* add prc15 check
* fix comments
* fix cli tests
* add doc
* add mock for LeveledQuoteProvider when SEV-SNP device is not found
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
* fix manager reading attestation policy
* refactor PCR value checks and update attestation policy values
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
* fix tests for sev and grpc
---------
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
Co-authored-by: Sammy Oina <sammyoina@gmail.com >
2025-03-07 16:36:47 +01:00
5969ae3bcb
NOISSUE - Update SEV requirement ( #330 )
...
Updates the requirements on [sev](https://github.com/virtee/sev ) to permit the latest version.
Updates `sev` to 5.0.0
- [Commits](https://github.com/virtee/sev/compare/v4.0.0...v5.0.0 )
---
updated-dependencies:
- dependency-name: sev
dependency-type: direct:production
dependency-group: rs-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-31 15:47:12 +01:00
760c9bb580
NOISSUE - Rename backend info to attestation policy ( #314 )
...
* attestation policy field
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
* fix tests
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
* fmt
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
---------
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
2024-11-21 20:56:03 +01:00
5a22ac2eca
COCOS-159 - Improve test coverage to 65% ( #310 )
...
* few atls tests
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
* remove commented code
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
* add atls tests
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
* new line
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
* add more test cases
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
* more test cases
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
* add empty line and parallel test cases
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
* move const outside test case
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
---------
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
2024-11-19 08:13:33 +01:00
1e285e32b4
NOISSUE - Manifest checksum ( #306 )
...
* update backend info, and generate manifest checksun
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
* update report
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
* add test cases
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
* fix lint
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
---------
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
2024-11-08 14:56:45 +01:00
a3577da5b2
NOISSUE - aTLS minor fixes ( #305 )
...
* set minimum args
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
* update cli and allow provisional firmware
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
---------
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
2024-11-07 18:05:41 +01:00
e372cfc219
COCOS-192 - Add support for attested TLS ( #279 )
...
* add draft tls extension
* add client support for ipv6
* remove vscode
* add evidence request server payload
* clean up the code
* add fetch and verify for quote provider
* add build parameters for buildroot
* change Makefile to always enable CGO
* fix ci
* add malloc check for NULL
* add copyright
* renamed files and fix cgo lint
* fix cache test
* fix server tests
* remove ineffective assignment
* fix no-TLS connection
* add check for SSL_set_fd failure
* add tests for verification of attestation
* fix CI
* fix failing tests
* fix backend tests
* remove commented code
* separate verify and validate function
* fix failing test
* Simplify function name
---------
Co-authored-by: ultraviolet <cocosai@ultraviolet.local.pragmatic-it.com >
2024-11-04 19:10:34 +01:00
63994d78b8
NOISSUE - Add Rust gitignore ( #268 )
...
* chore(backendinfo): Add rust build artefacts to gitignore
Signed-off-by: Rodney Osodo <socials@rodneyosodo.com >
* style: format file following rust linter guidelines
Signed-off-by: Rodney Osodo <socials@rodneyosodo.com >
* chore(CI): Add rust CI pipeline
Signed-off-by: Rodney Osodo <socials@rodneyosodo.com >
---------
Signed-off-by: Rodney Osodo <socials@rodneyosodo.com >
2024-09-30 11:49:18 +02:00
aa01ef795d
Update sev requirement ( #257 )
...
Updates the requirements on [sev](https://github.com/virtee/sev ) to permit the latest version.
Updates `sev` to 4.0.0
- [Commits](https://github.com/virtee/sev/compare/v3.1.1...v4.0.0 )
---
updated-dependencies:
- dependency-name: sev
dependency-type: direct:production
dependency-group: rs-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-25 17:38:24 +02:00
bdbeb4e976
COCOS-199 - Enable testing of SEV features on any machine ( #205 )
...
* make attestation embeddable
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
* mock backend info
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
* embed files
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
* finish up
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
---------
Signed-off-by: Sammy Oina <sammyoina@gmail.com >
2024-08-23 16:52:07 +02:00
9161d30683
PRISM-312 : Fetch Backend Information ( #187 )
...
* fetch backend info
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
WIP
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
* add id to grpc response
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
* read backend information
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
revert changes in test server
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
* update info json
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
* test on dell machine
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
* update protoc
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
update protoc
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
* refactor fetch backend info
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
* remove computation definition
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
* refactor manager service creation
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
* refactor manager service creation:
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
* return config to main
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
* add tests on test/computation
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
* update backend info path
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
* use sudo
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
* comment out sev testing section
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
* update backend info json location
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
* handle failed execution
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
* return error on failed execution:
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
---------
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com >
2024-08-01 15:02:50 +02:00
24a76a1685
NOISSUE - Fix attested TLS and attestation CLI ( #184 )
...
* update code to reflect updated libraries
* fix attestation CLI
* update manual test for attestation CLI
2024-07-30 16:05:49 +02:00
006897a57c
COCOS-153 - Add host-data option ( #163 )
...
* add host_data option
* add CLI hostdata option and rename platform to backend
* move code for computation hash to a function
* rename getComputationHash to computationHash
* add default for backend information field switch
2024-07-08 15:32:13 +02:00
0574abc228
NOISSUE - Add Rust script for fetching platform data ( #133 )
...
* add rust program for fetching platform data
* fix new line error
* add CLI options to add the measurement to platform_info.json file
* add documentation for platform info testing
* add explanation for sev-snp-measure
* delete excess space
* fix minor errors
* fix minor errors
* add file permision constant
2024-05-28 18:08:07 +02:00
Danko Miladinovic
dorcaslitunya
dependabot[bot]
Sammy Kerata Oina
b1ackd0t
Washington Kigani Kamadi