tpmdevid

Documentation

Index

• func BuiltIn() catalog.BuiltIn
• func Fingerprint(cert *x509.Certificate) string
• func NewCredActivationChallenge(akPub, ekPub tpm2.Public) (*devid.CredActivation, []byte, error)
• func VerifyCredActivationChallenge(expectedNonce, responseNonce []byte) error
• func VerifyDevIDCertification(pubAK, pubDevID *tpm2.Public, attestData, attestSig []byte) error
• func VerifyDevIDChallenge(cert *x509.Certificate, challenge, response []byte) error
• type Config
• type Plugin
  • func New() *Plugin
  • func (p *Plugin) Attest(stream nodeattestorv1.NodeAttestor_AttestServer) error
  • func (p *Plugin) Configure(_ context.Context, req *configv1.ConfigureRequest) (*configv1.ConfigureResponse, error)
  • func (p *Plugin) Validate(ctx context.Context, req *configv1.ValidateRequest) (*configv1.ValidateResponse, error)

Functions

func BuiltIn

func BuiltIn() catalog.BuiltIn

func Fingerprint

func Fingerprint(cert *x509.Certificate) string

func NewCredActivationChallenge

func NewCredActivationChallenge(akPub, ekPub tpm2.Public) (*devid.CredActivation, []byte, error)

func VerifyCredActivationChallenge

func VerifyCredActivationChallenge(expectedNonce, responseNonce []byte) error

func VerifyDevIDCertification

func VerifyDevIDCertification(pubAK, pubDevID *tpm2.Public, attestData, attestSig []byte) error

func VerifyDevIDChallenge

func VerifyDevIDChallenge(cert *x509.Certificate, challenge, response []byte) error

Types

type Config

type Config struct {
	DevIDBundlePath       string `hcl:"devid_ca_path"`
	EndorsementBundlePath string `hcl:"endorsement_ca_path"`
}

type Plugin

type Plugin struct {
	nodeattestorv1.UnsafeNodeAttestorServer
	configv1.UnsafeConfigServer
	// contains filtered or unexported fields
}

func New

func New() *Plugin

func (*Plugin) Attest

func (p *Plugin) Attest(stream nodeattestorv1.NodeAttestor_AttestServer) error

func (*Plugin) Configure

func (p *Plugin) Configure(_ context.Context, req *configv1.ConfigureRequest) (*configv1.ConfigureResponse, error)

func (*Plugin) Validate

func (p *Plugin) Validate(ctx context.Context, req *configv1.ValidateRequest) (*configv1.ValidateResponse, error)