mirror of
https://github.com/ultravioletrs/cocos.git
synced 2026-06-23 04:10:25 +00:00
Danko Miladinovic
67f939fc66
* manager, cli and agent vtpm support * rebase and changed atls for vtpm * deleted unused code * changed chekproto.yaml script so it find the manager proto file correctly * fixe manager proto version * fix agent tests * fix server agent test * fix attestation test * fix attestation test gofumpt * created dummy RWC for TPM * fix comment * add default PCR values * rebase main * fix rust ci and missing header * changed embedded attestation to VMPL 2 * fix unused impot * fix pkg test * address attestation type * fix agent attestation test * add prc15 check * fix comments * fix cli tests * add doc * add mock for LeveledQuoteProvider when SEV-SNP device is not found Signed-off-by: Sammy Oina <sammyoina@gmail.com> * fix manager reading attestation policy * refactor PCR value checks and update attestation policy values Signed-off-by: Sammy Oina <sammyoina@gmail.com> * fix tests for sev and grpc --------- Signed-off-by: Sammy Oina <sammyoina@gmail.com> Co-authored-by: Sammy Oina <sammyoina@gmail.com>
101 lines
3.9 KiB
C
101 lines
3.9 KiB
C
#ifndef ATLS_EXTENSION_H
|
|
#define ATLS_EXTENSION_H
|
|
|
|
#include <openssl/ssl.h>
|
|
#include <arpa/inet.h>
|
|
|
|
#define EVIDENCE_REQUEST_HELLO_EXTENSION_TYPE 65
|
|
#define ATTESTATION_CERTIFICATE_EXTENSION_TYPE 66
|
|
#define REPORT_DATA_SIZE 64
|
|
#define CLIENT_RANDOM_SIZE 32
|
|
#define TLS_CLIENT_CTX 0
|
|
#define TLS_SERVER_CTX 1
|
|
|
|
#define SEV_GUEST_DRIVER_PATH "/dev/sev-guest"
|
|
#define NO_TEE 0
|
|
#define AMD_TEE 1
|
|
|
|
typedef struct evidence_request
|
|
{
|
|
int tee_type;
|
|
char vtpm_nonce[CLIENT_RANDOM_SIZE];
|
|
char tee_nonce[REPORT_DATA_SIZE];
|
|
} evidence_request;
|
|
|
|
typedef struct tls_extension_data
|
|
{
|
|
uintptr_t fetch_attestation_handler;
|
|
uintptr_t verification_validation_handler;
|
|
evidence_request er;
|
|
} tls_extension_data;
|
|
|
|
typedef struct tls_server_connection
|
|
{
|
|
int server_fd;
|
|
char* cert;
|
|
int cert_len;
|
|
char* key;
|
|
int key_len;
|
|
struct sockaddr_storage addr;
|
|
uintptr_t fetch_attestation_handler;
|
|
} tls_server_connection;
|
|
|
|
typedef struct tls_connection
|
|
{
|
|
SSL_CTX *ctx;
|
|
SSL *ssl;
|
|
int socket_fd;
|
|
struct sockaddr_storage local_addr;
|
|
struct sockaddr_storage remote_addr;
|
|
tls_extension_data tls_ext_data;
|
|
} tls_connection;
|
|
|
|
tls_server_connection* start_tls_server(const char* cert, int cert_len, const char* key, int key_len, const char* ip, int port);
|
|
tls_connection* tls_server_accept(tls_server_connection *tls_server);
|
|
int tls_server_close(tls_server_connection *tls_server);
|
|
int tls_read(tls_connection *conn, void *buf, int num);
|
|
int tls_write(tls_connection *conn, const void *buf, int num);
|
|
int tls_close(tls_connection *conn);
|
|
tls_connection* new_tls_connection(char *address, int port);
|
|
int set_socket_read_timeout(tls_connection* conn, int timeout_sec, int timeout_usec);
|
|
int set_socket_write_timeout(tls_connection* conn, int timeout_sec, int timeout_usec);
|
|
char* tls_return_addr(struct sockaddr_storage *addr);
|
|
int tls_return_port(struct sockaddr_storage *addr);
|
|
int compute_sha256_of_public_key(X509 *cert, unsigned char *hash);
|
|
|
|
// Extensions
|
|
void evidence_request_ext_free_cb(SSL *s, unsigned int ext_type,
|
|
unsigned int context,
|
|
const unsigned char *out,
|
|
void *add_arg);
|
|
int evidence_request_ext_add_cb(SSL *s, unsigned int ext_type,
|
|
unsigned int context,
|
|
const unsigned char **out,
|
|
size_t *outlen, X509 *x,
|
|
size_t chainidx, int *al,
|
|
void *add_arg);
|
|
int evidence_request_ext_parse_cb(SSL *s, unsigned int ext_type,
|
|
unsigned int context,
|
|
const unsigned char *in,
|
|
size_t inlen, X509 *x,
|
|
size_t chainidx, int *al,
|
|
void *parse_arg);
|
|
void attestation_certificate_ext_free_cb(SSL *s, unsigned int ext_type,
|
|
unsigned int context,
|
|
const unsigned char *out,
|
|
void *add_arg);
|
|
int attestation_certificate_ext_add_cb(SSL *s, unsigned int ext_type,
|
|
unsigned int context,
|
|
const unsigned char **out,
|
|
size_t *outlen, X509 *x,
|
|
size_t chainidx, int *al,
|
|
void *add_arg);
|
|
int attestation_certificate_ext_parse_cb(SSL *s, unsigned int ext_type,
|
|
unsigned int context,
|
|
const unsigned char *in,
|
|
size_t inlen, X509 *x,
|
|
size_t chainidx, int *al,
|
|
void *parse_arg);
|
|
|
|
#endif // ATLS_EXTENSION_H
|