Remove keyconv files to fix the license issue.

These files are part of the key conversion tool
that is not used.

Issue-ID: AAF-814

Change-Id: I01e1733329022059e410ad9d7cd390faff09a97c
Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>

Bump up the version

Snapshot images are taged with 4.0.0 now

Change-Id: I57d99a9ac6436308f34aa4df7fa1ed7ea45d9037
Issue-ID: AAF-764
Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>

Fix distcenter build failure

Create new dir and clone to remove conflict

Change-Id: I07b0f4411ee6707e9ffc57507d6fca85035843dc
Issue-ID: AAF-764
Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>

Merge "Fix nightly build failure"

Fix nightly build failure

Add ssl library path to ldconfig and import build

Change-Id: Iad92bc261747bdf2e8356da1a4e46df6f36fa93a
Issue-ID: AAF-764
Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>

Fix info.yaml build failures

This patch is to trigger the info.yaml build
It should be green after the latest changes.

Issue-ID: AAF-805
Change-Id: I149949bf8f8d9981b7f4efa18debc292f000f9b5
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Merge "Modify the build.sh tp pass jenkins build"

Modify the build.sh tp pass jenkins build

Change-Id: I7b7a113816d1680c4cf3b8f93ced58f2157e0b0d
Issue-ID: AAF-793
Signed-off-by: Pramod Raghavendra Jayathirth <pramod.raghavendra.jayathirth@intel.com>

Updating the docker file to support latest tss

Issue-ID: AAF-778

Change-Id: I1dce78d4f2a6ab53432652b51989e9dcba5755c5
Signed-off-by: Pramod Raghavendra Jayathirth <pramod.raghavendra.jayathirth@intel.com>

Upgrade Duplicate utility to the latest tss

This patch updates the Duplicate utility to
match with the latest tss stack
Issue-ID: AAF-763

Change-Id: I08a01b193e8cf550fa1cfcbe0781672b3051eb96
Signed-off-by: Pramod Raghavendra Jayathirth <pramod.raghavendra.jayathirth@intel.com>

Update SoftHSM v2.0 to the latest version

Change-Id: Ib3ec2c297f897c82776a66fe2ad55b18984c0337
Issue-ID: AAF-687
Signed-off-by: Pramod Raghavendra Jayathirth <pramod.raghavendra.jayathirth@intel.com>

Merge "Upgrade TPM2_Plugin to match with the tss stack"

Merge "Update Initialization tool"

Upgrade TPM2_Plugin to match with the tss stack

This upgrade is required due to the changes
in latest stable tss, abrmd and tpm-tools
Issue-ID: AAF-761

Change-Id: I564dba726ceb69a9d4caf8498940cadb810a478e
Signed-off-by: Pramod Raghavendra Jayathirth <pramod.raghavendra.jayathirth@intel.com>

Upgrade import utility

This upgrade is required to make the import
utility compaitable with latest tss stack
Issue-ID: AAF-764

Change-Id: I8bf4d9cef3a669592f1828c65974cf946dda9804
Signed-off-by: Pramod Raghavendra Jayathirth <pramod.raghavendra.jayathirth@intel.com>

fix check errors in the build file

Issue-ID: AAF-793
Change-Id: I79f17ad508a29ff0239b7504cd8ab2ce5e11e8bb
Signed-off-by: Pramod Raghavendra Jayathirth <pramod.raghavendra.jayathirth@intel.com>

Update Initialization tool

Change-Id: I88686761d324f9bd734d03ccb92f4a49783cf4a0
Issue-ID: AAF-762
Signed-off-by: Pramod Raghavendra Jayathirth <pramod.raghavendra.jayathirth@intel.com>

Add missing INFO.yaml blocks

Add missing information so that the new verify
job passes. Fix indentation.

Change-Id: Ifd7c7fd5f8be771ed92dcbacfb2c9f00898d7c46
Issue-ID: CIMAN-134
Signed-off-by: Jessica Wagantall <jwagantall@linuxfoundation.org>

Update INFO.yaml

Issue-ID: AAF-729
Change-Id: Idcfecb548ce51c5e092eb8c4aea100e97aed9056
Signed-off-by: Instrumental <jonathan.gathman@att.com>

Merge "Adding multithreading support to the application"

Adding multithreading support to the application

change "thread_count" variable in the
CaSignMultThread.java file to control
the number of threads created

Change-Id: I2296c01d476a7cf18e7fa221d5dd74044cd87293
Issue-ID: AAF-471
Signed-off-by: Pramod Raghavendra Jayathirth <pramod.raghavendra.jayathirth@intel.com>

Merge "Add Unit test to the SoftHSMv2 build"

fix typos

Change-Id: Ib2c44f05aebe8799c5b5f970cc2ceb22a4db2887
Signed-off-by: Stanislav Chlebec <stanislav.chlebec@pantheon.tech>
Issue-ID: AAF-582

Add Unit test to the SoftHSMv2 build

Issue-ID: AAF-549
Change-Id: Idca602a0960467d933d339790ee4c16c3f747ad7
Signed-off-by: Pramod Raghavendra Jayathirth <pramod.raghavendra.jayathirth@intel.com>

fix no such file or directory error

Create the required directory for abrmd data
before creating files

Issue-ID: AAF-527
Change-Id: I0fbc77d8eaa5b012b01dd01664ee810bce18a1d0
Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>

Fix code formatting to match rest of Softhsm

Fix code formatting in Hwinfra module to match
rest of SoftHSM code.

Issue-ID: AAF-555
Change-Id: Ibbb39b72f90c7589b4999a1e2b10acf03d5c5818
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

func test framework and tests for sshsm

This patch adds test framework and tests
for TPM based CA key protection import and signing.

Change-Id: I7bdd602f7275dd8613faeced11aad6c09a8aab52
Issue-ID: AAF-527
Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>

Merge "Add abrmd readiness check script to base"

Add abrmd readiness check script to base

Testca and any other container that depends on
abrmd needs a script to check if it is up and ready
to accept commands. This scripts addresses that via the
tpm2_listpcrs command.

Issue-ID: AAF-520
Change-Id: I432b6f16a78d8eb6f18118ca64f040a70b2cab25
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Update location of passphrase in distcenter

Location for passphrase needed to be updated in
scenarios where tpm is not available
P2: Add more changes to get the passphrase to be passed
    correctly

Issue-ID: AAF-521
Change-Id: Ibf022e05489e77cdcec642a543abf5cec3c21e53
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Fix text file busy error when calling sub scripts

Changing the file permission immediately followed
by running the script results in text file busy
error intermittently.

Change-Id: Ib1aa2273135cb42a8837af2b5a3aa630ca61dd9e
Issue-ID: AAF-519
Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>

Merge "Remove global variable sessionData"

Fix bugs in startup script and move scripts to bin

Testing in kubernetes revealed some issues that
needed to be fixed. This patch contains those changes.

Issue-ID: AAF-510
Change-Id: Ib7956a2d49f4f7f663f18522e71758dffe35bcb0
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Remove global variable sessionData

Remove global variable for storing session info.
Instead this is populated by the calling function
as required.

Issue-ID: AAF-334
Change-Id: I146b52bcee758fd053129fdf4f7a75691575e6e9
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Add support for PRK password in TPM plugin

PRK Password needs to be passed to TPM Plugin
for load key operations to work.
P7: Moved readPassword to calling function
P8: Check size of password string before memcpy
P9: Updated readme

Issue-ID: AAF-484
Change-Id: I213446012005f2919ee0912ccfe99c3a555ccb74
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Merge "Add import scripts to base image"

Add import scripts to base image

These scripts imports the CA key to either tpm or
softhsm. Updates the pkcs11 config file and adds
the required config for softhsm

Change-Id: If45cfb514756bf4ab03081d458ed728921fa1d51
Issue-ID: AAF-483
Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>

Merge "Fix key pair loading in plugin"

Fix key pair loading in plugin

Key pair reading in TPM plugin assumes a particular order for input buffers.
This patch checks the buffers and removes that assumption

Issue-ID: AAF-478
Change-Id: I4fff17c912a0890138d1f432e5bfab5c9946b1cb
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Remove hardcoded paths and use CWD instead

Removed hardcoded paths and using CWD instead.
Makes deployment testing simpler in kubernetes.
Makes data localized and easier to debug.

Issue-ID: AAF-474
Change-Id: Ic671a8de2442bb9ca11bbc994a6e84bb12053617
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Merge "Script for SoftHSMv2 fallback mechanism"

Fix missing init.sh while building abrmd container

The init.sh file is removed as part of ownership change
hence needs to be removed from dockerfile as well.

Change-Id: I62fc1e3e15f98caf68c78be6b3ab0dbb326c2eb4
Issue-ID: AAF-409
Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>

Merge "Add option to provide password to import tool"

Merge "Use base image for building abrmd"

Merge "Modify initialization to remove ownership step"

Add option to provide password to import tool

Add -password command line argument to take the
primary key password to import keys.

Issue-ID: AAF-464
Change-Id: I68b87139405427d065883ffe714e1072d3e987df
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Script for SoftHSMv2 fallback mechanism

This will facilitate the SoftHSMv2 implementation
when TPM is unavailable

Change-Id: Ic77627702db514213cece200a259f723e6d66d34
Issue-ID: AAF-414
Signed-off-by: Pramod Raghavendra Jayathirth <pramod.raghavendra.jayathirth@intel.com>

Modify initialization to remove ownership step

TPM ownership and primary key creation is assumed to be a step that is
executed by the system administrator who will provide the credentials
to pods during startup [Srini]. Now, init only reads the public portion of the
primary key and puts it the host folder.
P9: Remove init.sh. Not needed as initialize will directly talk to device now.
Initialize is called during Step 1 and run_abrmd is called during Step 2

Issue-ID: AAF-409
Change-Id: Id0d1860f257c98045613e90b6b88e37858a9aceb
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Use base image for building abrmd

Use base image for building abrmd container
Removes needless compilation steps involved

Issue-ID: AAF-461
Change-Id: Ib9e1606b24223f235f5e60ff94add29e142f6bda
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Add build script for testcaservice container

Add script to build and push the image to
nexus repo. Invoke the script from top level
build script.

Issue-ID: AAF-447
Change-Id: I112efd4b484ee05e0ba0811efcb8ba7082a5d621
Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>

Add build script for initabrmd container

Add script to build and push the image to
nexus repo. Invoke the script from top level
build script.

Change-Id: I644428d2da3bbc4688a3a45d34b8b7e9148314b0
Issue-ID: AAF-443
Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>

Merge "Add build scripts and tabrmd"

Merge "Containerize TPM Initialization tool"

Add build scripts and tabrmd

There is a dependency on tabrmd while building duplicate tool
and this is required for now. Cleanup and use base container
from nexus repo. Add build scripts for nightly build.

Change-Id: I4c3487d22988927084d7336671b81144374ccb5d
Issue-ID: AAF-418
Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>

Containerize TPM Initialization tool

Modifying ABRMD container to support Init tool

Change-Id: I8b2f8171688b67567e3ad4a3e4942ae76737bdfc
Issue-ID: AAF-342
Signed-off-by: Pramod Raghavendra Jayathirth <pramod.raghavendra.jayathirth@intel.com>

Copy out encrypted private key selectively

Only in the case where no tpm hosts are present, then encrypt
and copy out the private key

Change-Id: I34fbcf65e61c4e6803f594ffe1c527c9afd8f184
Issue-ID: AAF-376
Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>

Merge "Base images build and dockerfiles"

Base images build and dockerfiles

This patch provides a build script that can be triggered
by jenkins job to build base containers for AAF.

Change-Id: I029784e7adbd7076967b756c23678b562438e06f
Issue-ID: AAF-418
Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>

Change to container based naming convention

Changed naming and folder structure to allow for
easy integration with kubernetes. Changed createca
to distcenter name, after the container name.

Issue-ID: AAF-409
Change-Id: I6f9f290f7c1f02b42a11aea85c26b95b334082d1
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Merge "Cleanup to remove the added sample files"

Merge "Changes to encrypt and copy out private key"

Cleanup to remove the added sample files

The output files from Init, Duplicate and Import
is different and unique to each TPM and host

Change-Id: I718fedec07130cfb2ba7959aa2b964c2b59dbae5
Issue-ID: AAF-342
Signed-off-by: Pramod Raghavendra Jayathirth <pramod.raghavendra.jayathirth@intel.com>

Changes to encrypt and copy out private key

Using the given passphrase, encrypt the private key and copy out.
Use the public key from the mount for generating out files.

Change-Id: I5de42ad4c8a781201ed559b04b1457fe9e661e42
Issue-ID: AAF-376
Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>

Cleanup unused jar file

bctest jar file is not used and can be removed

Change-Id: I9121a9f3ce8312a73454e51725f2d6f57522560d
Issue-ID: AAF-342
Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>

Remove already installed packages

These are installed and present in the base container.

Change-Id: Ibf591476e1fb9e036398043614e2a92ac939f6ba
Issue-ID: AAF-342
Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>

Merge "Adding the CA service container"

Bug - Private Handle mandatory

Private handle should not be mandatory
as it is not needed in no HW support case

Change-Id: I92158cb0b90f2b661ac091afc4131ad048887e17
Issue-ID: AAF-405
Signed-off-by: Ritu Sood <ritu.sood@intel.com>

Adding the CA service container

Adding the dockerfile and required scripts
to implement CA service container functionality

Issue-ID: AAF-342
Change-Id: I8ea086008d0d8e50bfad3886c741ba21642ac974
Signed-off-by: Pramod Raghavendra Jayathirth <pramod.raghavendra.jayathirth@intel.com>

Merge "Key distribution center container"

Key distribution center container

This container generates the ca key and
certificate and encrypts it using SRK public
key and stores the generated files on host
folder shared with this container. The public
key is built into the image for sample
known target host.

Change-Id: Ibcfdd10bca86a3e785a7ba6221e22fb78d8b706f
Signed-off-by: Manjunath Ranganathaiah <manjunath.ranganathaiah@intel.com>
Issue-ID: AAF-376

Merge "Changing the directory of ABRMD container files"

Changing the directory of ABRMD container files

Including the ABRMD in a seperare directory for
better organization

Change-Id: I1097a2d7be5bc99b40b0bd59a4bdb939478d5129
Issue-ID: AAF-342
Signed-off-by: Pramod Raghavendra Jayathirth <pramod.raghavendra.jayathirth@intel.com>

Adding the sample files for the tools

the tools used are Init and duplicate

Change-Id: Ib3298f5cc1970d49834089ba969d4ddc1f41fe27
Issue-ID: AAF-342
Signed-off-by: Pramod Raghavendra Jayathirth <pramod.raghavendra.jayathirth@intel.com>

Adding the sample directory for application

This can be considered as a sample for
shared voulume which holds application
content

Change-Id: Id46d33869402c22ae9902d1cdff4c1704e422362
Issue-ID: AAF-342
Signed-off-by: Pramod Raghavendra Jayathirth <pramod.raghavendra.jayathirth@intel.com>

Change installation directory for tpm-util

changing the path from the user's home directory to
root's home directory for duplicate and import utlity

Change-Id: I1550492925fdd0e3096e7aab853c16896819d61c
Issue-ID: AAF-334
Signed-off-by: Pramod Raghavendra Jayathirth <pramod.raghavendra.jayathirth@intel.com>

Merge "Add INFO.yaml file"

Merge "Allocating memory for modulus and exponent"

Merge "Added 3 more TPM2 Plugin APIs"

Add INFO.yaml file

Add INFO.yaml to list:
- Project description
- Properties
- PTL information
- Meeting information
- Committer information

Change-Id: I9e1a7b8db453fe1558a2f52a859d62c3767f115b
Issue-ID: CIMAN-134
Signed-off-by: Jessica Wagantall <jwagantall@linuxfoundation.org>

Added 3 more TPM2 Plugin APIs

Added tpm2_plugin_rsa_sign_update(...), tpm2_plugin_rsa_sign_final(...),
tpm2_plugin_rsa_sign_cleanup(...) APIs.

Issue-ID: AAF-94
Change-Id: I104ff7b979329c03e91206d19371d3904f163993
Signed-off-by: NingSun <ning.sun@intel.com>

Merge "Added a new Attribute to store TPM key handle"

Added a new Attribute to store TPM key handle

Includes changes to detect existing instances of key  and
also some bug fixes. Also added new functionality for
RSA_SignUpdate, RSA_SignFinal and RSA_Cleanup

Issue-ID: AAF-260
Change-Id: Ib064e86b8f112784ed6d352ab1557ab9a13c5978
Signed-off-by: Ritu Sood <ritu.sood@intel.com>

Merge "Adding support for containerized tss and abrmd"

Allocating memory for modulus and exponent

SoftHsm expects memory to be allocated by
the plugin

Issue-ID: AAF-260
Change-Id: I4ef93918a91971680f1f46517a46a29717a096b2
Signed-off-by: Ritu Sood <ritu.sood@intel.com>

Update tpm2_plugin_load_key() API

Add reading public key modulus and exponent information function in this API.

Issue-ID: AAF-94
Change-Id: I9d1b54336842dfc89140e281cec2ee43f0bb13d3
Signed-off-by: NingSun <ning.sun@intel.com>

Adding support for containerized tss and abrmd

Adding a dockerfile to build a container that has
tss, abrmd and tpm2-tools installed on it.

Issue-ID: AAF-275
Change-Id: I8bda86d36290785950cf3c23d6527e1245652f42
Signed-off-by: Kiran Kamineni <kiran.k.kamineni@intel.com>

Remove keyconv code from SoftHSM library

Code not used by SoftHsm and has license issues

Issue-ID: AAF-279
Change-Id: Ie07eef82f9e7bcc445772dba474c1f0e7753542c
Signed-off-by: Ritu Sood <ritu.sood@intel.com>

Modify TPM2 Plugin codes

Modify codes to use tpm2-tss version 1.2.0, tpm2-abrmd version 1.1.1
tpm2-tools version 2.1.0.

Issue-ID: AAF-94
Change-Id: I2feccbb8dbe718756a5fd363b8dc703562ccd5eb
Signed-off-by: NingSun <ning.sun@intel.com>

Utility to Import external RSA pem key into TPM

Duplicate tool - Takes RSA private key in
pem format as input and generates
TPM structured buffers as expected by tpm Import

Import tool - Takes input buffers from
Duplicate tool and results in pub/priv blobs
which can be used to load the key in tpm
storage heirarchy's as child to primary key

Change-Id: I0af6676895ce0cc22c70e5546908e905b78bb71e
Issue-ID: AAF-207
Signed-off-by: Arun kumar Sekar <arunkumarsit@gmail.com>

Folder name changed from tpm-tools to tpm-util

Change-Id: Ica9eca7f32fac0757a9c1718c1e5ec7c922ca8cd
Issue-ID: AAF-207
Signed-off-by: Arun kumar sekar <arunkumarsit@gmail.com>

Merge "tpm tools for the below functionalities"

tpm tools for the below functionalities

1.INIT(Script) - Establish connection with the
Actual TPM Hardware and loads the primary key
into the TPM hardware

2. Sign and verify(Script) - Loads the key and
does the sign and verify operation

Issue-ID: AAF-207
Change-Id: I015eb5fbc6f0e6f09ca454ed1bb55c5f5aadebae
Signed-off-by: Pramod <pramod.raghavendra.jayathirth@intel.com>

Clean up TPM2 PLugin codes

Remove unused and redundant codes.

Issue-ID: AAF-94
Change-Id: Icfdbf29e2d7caa339977e7d074f16e123cbff84f
Signed-off-by: NingSun <ning.sun@intel.com>

Adds the HardwareInfra layer in SoftHSM

This enables the support of multiple HSMs

Issue-ID: AAF-200
Change-Id: I825a72a0bf46827ff3be0c0311085cf970b970a6
Signed-off-by: Pramod <pramod.raghavendra.jayathirth@intel.com>

Add more codes in tpm2-plugin

Implement tpm2_plugin_load_key() and tpm2_plugin_rsa_sign() APIs

Issue-ID: AAF-94
Change-Id: I5f4329fdf973e52264d9e0e8aabc864c5fbdeebf
Signed-off-by: NingSun <ning.sun@intel.com>

Remove win32 support in SoftHSMv2

Due to license issue, we have to remove win32 support in SoftHSMv2.

Issue-ID: AAF-151
Change-Id: I31dda45ed84065819e26be8205747dd096a37432
Signed-off-by: NingSun <ning.sun@intel.com>

Setup TPM2-Plugin build environment

Add initial codes to build TPM2-plugin shared lib

Issue-ID: AAF-94
Change-Id: I96dee3699aa250b69350d6f01401f3831cf515f7
Signed-off-by: NingSun <ning.sun@intel.com>

Initial sshsm project structure

Issue-ID: AAF-94
Change-Id: I5e82fff418e7567b161acf9b98013a9b85ffc5b4
Signed-off-by: NingSun <ning.sun@intel.com>

Initial empty repository