v0.0.1-alpha
Pre-release
Pre-release
What's Changed
- Add rustfmt in Travis by @frozencemetery in #4
- Appease rustfmt by @frozencemetery in #5
- Add basic installation instructions for the Keylime RPM distribution and copy over RPM spec file by @mbestavros in #8
- Finished adding quote resquest handling functions by @leonjia0112 in #9
- Remove and ignore Cargo.lock by @frozencemetery in #10
- Test tpm function and bug fix by @leonjia0112 in #13
- Add key derivation function binding and appropriate tests by @mbestavros in #12
- Add secure mount function by @leonjia0112 in #15
- Update README file by @leonjia0112 in #17
- Add logging example and some readme fix ups by @lukehinds in #24
- Further fixes to README.md by @lukehinds in #26
- Add tpmdata file io functions for keylime to read/write tpm data by @leonjia0112 in #16
- Fix log by @leonjia0112 in #31
- Add OpenSSL bindings for RSA public key import and random RSA key generation by @mbestavros in #43
- Removed all unwraps/panics for all code except testing by @leonjia0112 in #36
- Update .gitignore to ignore tpmdata.json changes by @mbestavros in #46
- Add custom error type for OpenSSL bindings by @mbestavros in #49
- Migrate RPM to its own repository by @lukehinds in #51
- Update existing crypto bindings to return custom KeylimeCryptoError by @mbestavros in #52
- Add KeylimeTpmError support and change return type in tpm.rs by @leonjia0112 in #53
- Add crypto binding for OpenSSL RSA decryption by @mbestavros in #59
- Rename
node
toagent
. by @lukehinds in #62 - Update README.md by @leonjia0112 in #61
- Update crypto.rs by @leonjia0112 in #63
- Place test data specific files into their own directory by @lukehinds in #79
- Implements Config Parser by @lukehinds in #77
- Update README.md to remove TPM1 ref and update URL by @lukehinds in #80
- Port
run
andKeylimeTpmError
to unique modules by @lukehinds in #82 - Fix line split in secure mount and notify by @lukehinds in #84
- Implement Apache 2.0 License by @lukehinds in #85
- hash: Port HashAlgorithms by @ashcrow in #86
- Migrate to github actions by @lukehinds in #98
- Update keylime.conf to latest version by @lukehinds in #101
- Remove incorrect / redundant author from cargo.toml by @lukehinds in #104
- Typo in .rustfmt.toml is causing warnings by @lukehinds in #103
- Cargo.lock should not be in gitignore by @lukehinds in #105
- ci: Install tpm-tss2 dependencies by @ashcrow in #112
- Implement esapi crate and conf edition 2018 by @lukehinds in #107
- Build Error struct and use it by @puiterwijk in #121
- Refactor Handlers out of Main by @lukehinds in #125
- Pretty-print error if main errors by @puiterwijk in #129
- Remove nightly rustfmt values by @lukehinds in #128
- Use tss2-dev instead of tss-dev by @puiterwijk in #133
- Implements try_join for running multiple async by @lukehinds in #131
- New packages needed and readme refactor by @lukehinds in #130
- actix_web Implementation by @lukehinds in #135
- Add Dockerfile to create Fedora dev environment by @lkatalin in #122
- Use git tss-esapi and add tpm vendor check by @puiterwijk in #139
- Move to a Fedora container for CI by @puiterwijk in #140
- Allow nominator for CI checks on banned calls by @lukehinds in #143
- Make #[allow_ci] a comment by @lkatalin in #145
- Enable PR assignment automation from actions-automation by @mbestavros in #142
- Add create_ek() to tpm.rs by @lkatalin in #141
- Allow TCTI configuration via environment by @puiterwijk in #146
- Opt repo into "copy-labels-linked" automation action by @mbestavros in #150
- Bump to tss-esapi-4.0.10-alpha.2 by @puiterwijk in #153
- Use the rust package instead of rustup by @puiterwijk in #152
- Implement get_ek() function by @lkatalin in #151
- Docker compose file by @lukehinds in #154
- Some error improvements by @puiterwijk in #155
- Enable various lints and fix code by @puiterwijk in #156
- Basic quote handlers by @lukehinds in #157
- Implement revocation service from Python code by @ashcrow in #134
- Call revocation actions by @lkatalin in #159
- Update error handling for revocation scripts by @lkatalin in #162
- Apache license header to source files by @ashcrow in #163
- Override config location with environment variable by @ashcrow in #161
- Implement changes for registrar call by @lkatalin in #158
- Small fixes relating to Keylime components working together by @lkatalin in #165
- Do not allow signing by swtpm by @lkatalin in #169
- Fix communication errors between agent and registrar by @lkatalin in #166
- Fix secure mount error and add more verbose TPM error output by @lkatalin in #171
- Fix uppercase acronyms and use thiserror From derives by @puiterwijk in #182
- Pass a PKeyRef to asym_verify by @puiterwijk in #181
- Rebase on tss-esapi 5.0 by @puiterwijk in #180
- Use PKeys consistently by @lkatalin in #184
- Add more TPM helper functions by @lkatalin in #185
- Send quote data to actixweb handlers by @lkatalin in #189
- Small fixes in TPM functions by @lkatalin in #190
- Add function to read PCR mask by @lkatalin in #191
- Add marshaling functions for TPM structs by @lkatalin in #193
- Add Quote functionality by @lkatalin in #195
- Add handling for Identity and Integrity quotes by @lkatalin in #196
- Fix new clippy lints by @lkatalin in #198
- Add dependency for libzmq3-dev / zeromq-devel by @lukehinds in #200
- Fix minor typos by @ueno in #215
- Remove verify stub as we are not using it by @lkatalin in #222
- Add more verbose logging to better match Python agent by @lkatalin in #223
- Do not fail if EK cert is not present in TPM NV by @ueno in #214
- Better documentation of consts by @lkatalin in #225
- Drop references to vmask by @lkatalin in #227
- Fix bug in revocation service by @lkatalin in #229
- Add U and V key handlers, and decrypt + run payload by @lkatalin in #197
- Run payload script from a shell by @ueno in #231
- Do not resend pubkey to CV after attestation by @lkatalin in #230
- Fix for race condition bug by @lkatalin in #232
- Output mask info by @lkatalin in #236
- Accept sets of U and V keys; use new Key types by @lkatalin in #238
- libarchive-devel is needed to build on Fedora by @mpeters in #241
- Add "v1.0" prefix to agent APIs by @mpeters in #243
- Fix clippy errors, update to newest TSS-ESAPI by @lkatalin in #253
- Add Ueno as a maintainer and set codeowners by @lukehinds in #252
- Generate Cargo.lock file by @aplanas in #244
- build: Adjust package dependencies to compile in Fedora by @ueno in #245
- keys_handler: verify HMAC in constant-time by @ueno in #248
- Retain the main loop running after payload execution by @ueno in #249
- Fix bugs that occur after a delete and re-add from the tenant by @lkatalin in #264
- quotes_handler: Add unit tests by @ueno in #265
- keys_handler: Add unit tests by @ueno in #266
- Add support for contact ip and port for the verifier and tenant to use by @THS-on in #242
- ci: Check unit test coverage with cargo tarpaulin by @ueno in #216
- Fix 0mq problem by @lkatalin in #272
- Add keylime_ima_emulator executable for testing by @ueno in #246
- Run Fedora tests on unified Keylime test container by @mbestavros in #279
- Code refactor to use updated tss-esapi by @lkatalin in #282
- tpm: remove special handling for PCR10 by @THS-on in #289
- secure_mount: fix tmpfs creation for secure mount point by @THS-on in #291
- Allow the hash, signing and encryption algorithm to be changed by @THS-on in #292
- Try to load AK from disk instead of always creating a new one by @THS-on in #293
- quotes_handler: send the TPM2 UEFI eventlog if PCR0 is in mask by @THS-on in #290
- Add codeowners by @lkatalin in #294
- move global configuration into one single struct by @THS-on in #296
- Remove panic when running rev action by @lkatalin in #299
- Remove duplicate codeowners file by @lkatalin in #303
- Some refactoring on keys and crypto usage by @ueno in #268
- ima_emulator: Fix running hash calculation on resumption by @ansasaki in #295
- Use revocation certificate according to configuration by @ansasaki in #302
- crypto: Fix algorithms used for revocation signature by @ansasaki in #297
- keys_handler: Add API to get public key by @ansasaki in #304
- Fix build errors on 32-bit architecture by @ueno in #305
- quotes_handler: Check quotes in unit tests by @ueno in #269
- Bump versions of some dependencies by @ueno in #310
- Use Path and PathBuf consistently to represent paths by @ueno in #308
- Update to fix typo by @lkatalin in #320
- Bump tss-esapi crate to 7.0.0-beta.1 by @ueno in #322
- Inital support for API version 2.0 by @THS-on in #316
- Support python and non-python revocation actions by @ansasaki in #321
- Depend on Rust-TSS-ESAPI 7.0.0 stable by @lkatalin in #329
- Add a --help message. by @greyspectrum in #328
- Make clippy happy. by @greyspectrum in #332
- Install systemd unit file by @ueno in #309
- Add REST endpoint to receive revocation notifications by @ansasaki in #331
- Set working directory via KEYLIME_DIR env variable by @ansasaki in #335
- Revert API version to 2.0 by @lkatalin in #342
- Remove revocation actions naming restriction by @ansasaki in #337
- main: Do not error if payload_script is not found by @ansasaki in #338
- version_handler: Introduce /version REST endpoint (#313) by @ansasaki in #347
- Add support for iterative attestation by @ansasaki in #339
- Use shared JSON wrapper for HTTP responses by @ansasaki in #348
- keys_handler: Fix test for 256-bits keys by @ansasaki in #353
- keys_handler: Remove workaround for missing JSON Content-Type by @ansasaki in #352
- Add API to verify derived key by @ansasaki in #351
- Simplify integrity quotes structures by @ansasaki in #354
- Use JSON wrapper on error responses by @ansasaki in #356
- main: Use scopes to organize API by @ansasaki in #358
- Rename JSON wrapper methods by @ansasaki in #357
- Improve logging and error handling by @ansasaki in #359
- Add ansasaki as maintainer by @lkatalin in #362
- Update actix-web to 4, remove tokio 0.2 dependencies by @ueno in #334
- Add option to disable mTLS by @ansasaki in #365
- Fix typo in config_get() by @sergio-correia in #366
New Contributors
- @frozencemetery made their first contribution in #4
- @mbestavros made their first contribution in #8
- @leonjia0112 made their first contribution in #9
- @lukehinds made their first contribution in #24
- @ashcrow made their first contribution in #86
- @puiterwijk made their first contribution in #121
- @lkatalin made their first contribution in #122
- @ueno made their first contribution in #215
- @mpeters made their first contribution in #241
- @aplanas made their first contribution in #244
- @THS-on made their first contribution in #242
- @ansasaki made their first contribution in #295
- @greyspectrum made their first contribution in #328
- @sergio-correia made their first contribution in #366
Full Changelog: https://github.com/keylime/rust-keylime/commits/0.0.1