Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DeviceSecurityPkg: test exceed LIBSPDM_MAX_ROOT_CERT_SUPPORT. #337

Draft
wants to merge 106 commits into
base: DeviceSecurity
Choose a base branch
from

Conversation

Zhiqiang520
Copy link

@Zhiqiang520 Zhiqiang520 commented Nov 16, 2022

  1. there is only one SignatureList in database.
  2. The total number of RootCert in database exceed the LIBSPDM_MAX_ROOT_CERT_SUPPORT.
  3. Then fail to set multiple root certificates as trust anchors in SPDM context.
  4. Finally extend some error in PCR.

Signed-off-by: Zhao, Zhiqiang zhiqiang.zhao@intel.com

jyao1 and others added 30 commits October 25, 2022 10:14
Signed-off-by: Jiewen Yao <jiewen.yao@intel.com>
Signed-off-by: Jiewen Yao <jiewen.yao@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Jiewen Yao <jiewen.yao@intel.com>
…database.

Signed-off-by: Zhao, Zhiqiang <zhiqiang.zhao@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Jiewen Yao <jiewen.yao@intel.com>
…ly, DeviceSecurityPolicy is Measurement Only, DeviceSecurityPolicy is None of Authentication and Measurement.

Signed-off-by: Zhao, Zhiqiang <zhiqiang.zhao@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Jiewen Yao <jiewen.yao@intel.com>
Signed-off-by: Jiewen Yao <jiewen.yao@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Jiewen Yao <jiewen.yao@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Jiewen Yao <jiewen.yao@intel.com>
Signed-off-by: Jiewen Yao <jiewen.yao@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
…t has been modified again.

Signed-off-by: Zhao, Zhiqiang <zhiqiang.zhao@intel.com>
Signed-off-by: Jiewen Yao <jiewen.yao@intel.com>
Signed-off-by: Jiewen Yao <jiewen.yao@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
…_DYNAMIC_EVENT_LOG_STRUCT.

Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
…est config: Set SPDM responder support RSASSA_3072 and SHA_384 default.

Signed-off-by: Zhao, Zhiqiang <zhiqiang.zhao@intel.com>
Signed-off-by: Zhao, Zhiqiang <zhiqiang.zhao@intel.com>
qizhangz and others added 22 commits November 30, 2022 09:55
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
1. Set SPDM responder only support SPDM_MESSAGE_VERSION_11.
2. Do later device authentication and measurement successfully.

Signed-off-by: Zhao, Zhiqiang <zhiqiang.zhao@intel.com>
1. Set SPDM responder only support SPDM_MESSAGE_VERSION_10.
2. Do later device authentication and measurement successfully.
3. SPDM 1.0 does not support KEY_EXCHANGE or PSK_EXCHANGE, so skip.

Signed-off-by: Zhao, Zhiqiang <zhiqiang.zhao@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
Signed-off-by: Qi Zhang <qi1.zhang@intel.com>
1. there is only one SignatureList in database.
2. The total number of RootCert in database exceed the
 LIBSPDM_MAX_ROOT_CERT_SUPPORT.
3. Then fail to set multiple root certificates as
 trust anchors in SPDM context.
4. Finally fail to create a connection with the SPDM device
 and extend some error in PCR.

Signed-off-by: Zhao, Zhiqiang <zhiqiang.zhao@intel.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants