openconfig / attestz

54%

main: 50%

LAST BUILD ON BRANCH dev1

branch: dev1

CHANGE BRANCH

x

Reset

Sync Branches

• dev1
• CLIENT
• add-chain-verify
• add-context-to-interfaces
• add-ekcert-parsing
• add-enrollz-proto
• add-test-ver-id
• addHMACtest
• aesTEST
• aik-2
• aik-tpm12
• allow-either-serial-number
• atomic-rotate
• atomic-rotate-func
• atomic-rotation-proto
• bazel8
• byte_formats
• callIssueAndRotateOwnerCertsinEnrollWithHMAC
• cert-validation-with-vendor-ca-trust-anchors
• certserialformat
• cmp.diff
• code-structure-diagrams
• comment
• commentfix
• compile_grpc
• configure-github-builds
• construct
• decryptcbc
• dependabot/go_modules/github.com/golang/glog-1.2.4
• dependabot/go_modules/golang.org/x/net-0.23.0
• dependabot/go_modules/golang.org/x/net-0.33.0
• dependabot/go_modules/golang.org/x/net-0.38.0
• dependabot/go_modules/golang.org/x/net-0.55.0
• dependabot/go_modules/google.golang.org/grpc-1.79.3
• dependabot/go_modules/google.golang.org/grpc-1.83.1
• dependabot/go_modules/google.golang.org/grpc-1.83.2
• dependabot/go_modules/google.golang.org/protobuf-1.33.0
• docUpdate
• ek-ppk-1
• ek-ppk-2
• enrollz
• enrollz-1-2
• enrollz-attestz-port
• enrollz-serial-number-bug-fix
• enrollz-test
• enrollz-timeout-mitigation
• eventlog
• export-enrollz-biz-fields
• extract-pub-key-from-cert
• feature/eat-format
• finaltouches
• finaltouches-temp
• fix-challenge
• fix-fetch-ek-call
• fix-go-ci-perms
• fix-proto-hmac
• fix-proto-message-name
• fix-verify
• fix-verify-hmac
• fix-verify-tpm-cert
• fix_pb_generated_files
• fixes
• followup-mutliple
• generate-certs-in-tests-on-the-fly
• hines
• hines1
• iak-authpolicy-validation
• idevid-pub-key-typo
• idevie
• ignore-unexported-fields-from-x509.verifyoptions
• improve-decrypt-aes
• internal-review-request-validation
• issueOwnerIak
• issueOwnerIdevid
• iv-workaround
• lastestfix
• main
• make-backwards-compatibel
• marcushines-patch-1
• more-tests-for-tpm-cert-verifier
• morefinal
• morefixes
• multiple-control-card-refactor
• new-enum
• parse-key-p
• parse-rsa-key-params
• parse-sym-key-params
• parseidentityreq
• pass-device-id-to-tpm-cert-verifier
• pcr-example
• read-me-changes
• readme
• refactorEnroll
• remove-nonce-exchange
• renovate-cfg
• renovate/bazel-8.x
• renovate/bazel_features-1.x
• renovate/bazel_gazelle-0.x
• renovate/bazel_skylib-1.x
• renovate/com_github_grpc_grpc-1.x
• renovate/com_google_googleapis-digest
• renovate/configure
• renovate/deps
• renovate/gazelle-0.x
• renovate/google.golang.org-protobuf-1.x
• renovate/grpc-1.x
• renovate/io_bazel_rules_go-0.x
• renovate/major-deps
• renovate/major-protobuf-monorepo
• renovate/openconfig-common-ci-digest
• renovate/protobuf-monorepo
• reorg-verify-identity
• reorganize-for-go
• req-and-resp-wrapper-for-switch-owne-ca-client
• revert-72-verify-nonce-sig
• revert-79-firstchange
• revert-90-renovate/openconfig-common-ci-digest
• rm-deprecated
• rotate-flag
• rotate-oiak-cert-logic
• rotate-oidevid-support
• rotateOiak
• serial
• sn2
• sno
• support-ssl-profile-id
• symCa
• test-vectors
• testing
• tpm-cert-verifier-test
• tpm-verifier-verify-tpm-cert-logic
• tpm20
• tpm20-skeleton
• unexport-funcs
• update-default-ssl-profile
• update-protos
• update-readme
• validation
• verfiy-identity
• verification
• verify-certify-info
• verify-iak-idevid
• verify-idevid
• verify-idevid-attr
• vulnfix

Build # 33189728145

Build Type

Pull #248

github

Committed by chaskayamane

Commit Message

Implement enrollz emulator.

Add an enrollz implementation that will enroll a device with an owner
CA cert and key. This implementation does not check for a serial number
in the IDevId or IAK because some vendors do not provide it. Further,
it only enrolls the active control card. The enrollz emulator assumes
that a trust bundle was installed on the device via certz_profiles
(https://github.com/openconfig/bootz/blob/main/proto/bootz.proto#L272)
during the bootz process.

This change also provides a device emulator to run the enrollment
workflow against for testing purposes.

Pull Request Pull Request #248: Implement enrollz emulator.

Coverage Stats

399 of 660 new or added lines in 3 files covered. (60.45%)

173 existing lines in 3 files now uncovered.

2402 of 4446 relevant lines covered (54.03%)

0.6 hits per line