Release notes:
This change introduces an EK cert form. Previously ek certs were stored within tpm_ek_ca.py
, they are now instead stored as individual files to allow users to easily add their own ek certs without changing tpm_ek_ca.py
The location is set within keylime.conf
as tpm_cert_store
with the default value being /var/lib/keylime/tpm_cert_store/
List of all fixes / changes
- Fix bind data (TPM_DATA_PCR) for TPM2 implementation 5431549
- Refactored IP address and Port in the configuration file 0c41f0a
- Added code to fallback agent port to configparser value ac3a881
- Add agent_id to revocation message abbe3ce
- Added exception handling in doRegisterAgent e93b063
- Added agent UUID in verifier IMA log message b4352f7
- Log that a revocation event is being sent 0db2402
- Add agent_id to revocation message 57f2b97
- Additional STMicroelectronics ek certs 82d22c4
- Move tpm_cert_store into place e08499f
- Remove NVChip bfd45d0
- Added cloudagent_ip in INI config 815bc97
- Move to using files for EK CA certs 3a17fcc