diff options
| author | Andreas Steffen <andreas.steffen@strongswan.org> | 2011-11-27 19:10:29 +0100 |
|---|---|---|
| committer | Andreas Steffen <andreas.steffen@strongswan.org> | 2011-11-28 21:24:00 +0100 |
| commit | f2a521e7953342e3c9fb7d2742faa55ba015bf8a (patch) | |
| tree | a0e7ceb4113677b8a1d80773ea6bb704d63fa4d5 /src/libpts/plugins/imv_attestation/imv_attestation_process.c | |
| parent | 86a6f698cbb86a72d7a0d3c60f38a1d00f5e9377 (diff) | |
| download | strongswan-f2a521e7953342e3c9fb7d2742faa55ba015bf8a.tar.bz2 strongswan-f2a521e7953342e3c9fb7d2742faa55ba015bf8a.tar.xz | |
bound functional component measurements to AIK
Diffstat (limited to 'src/libpts/plugins/imv_attestation/imv_attestation_process.c')
| -rw-r--r-- | src/libpts/plugins/imv_attestation/imv_attestation_process.c | 12 |
1 files changed, 10 insertions, 2 deletions
diff --git a/src/libpts/plugins/imv_attestation/imv_attestation_process.c b/src/libpts/plugins/imv_attestation/imv_attestation_process.c index 5fa76121b..a50810b67 100644 --- a/src/libpts/plugins/imv_attestation/imv_attestation_process.c +++ b/src/libpts/plugins/imv_attestation/imv_attestation_process.c @@ -146,6 +146,8 @@ bool imv_attestation_process(pa_tnc_attr_t *attr, linked_list_t *attr_list, { tcg_pts_attr_aik_t *attr_cast; certificate_t *aik, *issuer; + public_key_t *public; + chunk_t keyid; enumerator_t *e; bool trusted = FALSE; @@ -158,7 +160,11 @@ bool imv_attestation_process(pa_tnc_attr_t *attr, linked_list_t *attr_list, } if (aik->get_type(aik) == CERT_X509) { - DBG1(DBG_IMV, "verifying AIK certificate"); + public = aik->get_public_key(aik); + public->get_fingerprint(public, KEYID_PUBKEY_INFO_SHA1, &keyid); + DBG1(DBG_IMV, "verifying AIK certificate with keyid %#B", &keyid); + public->destroy(public); + e = pts_credmgr->create_trusted_enumerator(pts_credmgr, KEY_ANY, aik->get_issuer(aik), FALSE); while (e->enumerate(e, &issuer)) @@ -285,8 +291,10 @@ bool imv_attestation_process(pa_tnc_attr_t *attr, linked_list_t *attr_list, default: case FAILED: attestation_state->set_measurement_error(attestation_state); - /* fall through to next case */ + comp->destroy(comp); + break; case SUCCESS: + name->log(name, " successfully measured "); comp->destroy(comp); break; case NEED_MORE: |