Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Integrate System Tests with Dockerized TPM 1.2 Provisioner #88

Closed
apldev3 opened this issue Feb 4, 2019 · 8 comments
Closed

Integrate System Tests with Dockerized TPM 1.2 Provisioner #88

apldev3 opened this issue Feb 4, 2019 · 8 comments
Assignees

Comments

@apldev3
Copy link
Contributor

apldev3 commented Feb 4, 2019

With the completion of #71 and merging of #77 imminent, we'll need to wrap up work on the System Testing by getting the TPM 1.2 Provisioner Docker image to run the system tests to ensure that everything is running properly.

Already seems to run fine locally, so this may only be a couple line update to get the Python System Tests to run.

@apldev3
Copy link
Contributor Author

apldev3 commented Mar 8, 2019

@busaboy1340 any updates on this?

@busaboy1340
Copy link
Contributor

Started working this issue again and having trouble with the EK cert. I'm getting a decrypt error on the provisioner, but the device registers and the EK cert validates ok on the ACA Portal. We're thinking about generating some new certs to try.

@busaboy1340
Copy link
Contributor

@apldev3 I'm hitting a wall with this 1.2 Emulator. After looking through the emulator/HIRS code, trying different setup steps and loading Endorsement Credentials in the proper NV index; I'm apparently missing something to get a successful provision. I'm seeing a "DECRYPT_ERROR" on the provisioner OR a "Unable to find Endorsement Credential" on the ACA Server. Any thoughts about what I'm doing wrong or something else to try?

@apldev3
Copy link
Contributor Author

apldev3 commented Mar 14, 2019

Unfortunately I'm not as familiar with the 1.2 Provisioner as that predates my work on this project, so I would need more information surrounding the decrypt error that you're seeing to start with any educated guess as to what's causing it. Like where exactly is it getting thrown and is it manifesting in the Java code or external to it.

That being said, in so far as the "Unable to find Endorsement Credential" that means that it can't pull whatever Endorsement Credential from the DB by whatever ID is being provided. I would imagine that if you're examining certificate details that the certificate is appearing, but getting more information causes this error to appear?

Honestly without more information it sounds like two separate issues you're bumping into.

@apldev3
Copy link
Contributor Author

apldev3 commented Mar 14, 2019

Also, if you can post more information pertaining to both issues that seem to be happening I can try to look into it more, but more than likely it will take a week or so for me to come back to it since I'll be away all next week.

@busaboy1340
Copy link
Contributor

No Prob. I'll post more info tomorrow. Thanks.

@busaboy1340
Copy link
Contributor

busaboy1340 commented Mar 15, 2019

busaboy1340 added a commit that referenced this issue Dec 23, 2019
* Initial system test for TPM 1.2 emulator.

* Update .travis.yml file.

* Added system test: test_20_tpm_1_2_initial_provision

* Cleaned up files.

* Correct docker location

* Re-arranged system tests.

* Execute test_12_attestation_ca_portal_online for all current collectors.

* Clean up files.

* Cleaned up files.

* Cleaned up files.

* Cleaned up files.

* Cleaned up files

* Updated system test driver.

* Set logging properties to DEBUG.

* Commented out test_13_tpm_1_2_initial_provision. Need to fix it.
@busaboy1340
Copy link
Contributor

Closed by PR #208.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants