Skip to content

add support for owner password - #37

Merged
Foxboron merged 1 commit into
Foxboron:masterfrom
novag:op
May 19, 2024
Merged

Foxboron merged 1 commit into
Foxboron:masterfrom
novag:op

Conversation

@novag

@novag novag commented Jan 28, 2024

Copy link
Copy Markdown
Contributor
  • Allow specifying an owner password when creating the SRK

Comment thread agent/agent.go Resolved
Comment thread utils/utils.go Resolved
Comment thread utils/utils.go Resolved
@novag

novag commented Feb 2, 2024

Copy link
Copy Markdown
Contributor Author

Thanks for the very quick review! Unfortunately, I've only now found the time to address the review.

Comment thread cmd/ssh-tpm-keygen/main.go Resolved
@Foxboron

Foxboron commented Feb 4, 2024

Copy link
Copy Markdown
Owner

Still missing a test to check that ownerpassword actually works for the key loading. But I can write that up if you dont want to figure out how.

@novag

novag commented Apr 1, 2024

Copy link
Copy Markdown
Contributor Author

Thanks! I will push the test soon. However, this PR is blocked until google/go-tpm#357 is merged.

@Foxboron

Foxboron commented Apr 1, 2024

Copy link
Copy Markdown
Owner

Currently away so won't review this until later this weeks, but why do you need HierarchyChangeAuth for this change?

@novag

novag commented Apr 1, 2024

Copy link
Copy Markdown
Contributor Author

It's required to set an initial owner password for the test. Or is there another way that I am not aware of to initialize the TPM simulator with an owner password?

@Foxboron

Foxboron commented Apr 1, 2024

Copy link
Copy Markdown
Owner

Ah, this makes sense :)

I haven't read the complete TPM spec and stuff I do is very much me learning as a I go. I haven't messed around with owner password so you are probably correct.

@novag

novag commented Apr 2, 2024

Copy link
Copy Markdown
Contributor Author

I haven't read the whole spec either, but I'm pretty sure there's no other command for it. Thanks for your quick reply! :)

Comment thread signer/signer.go Resolved
@Foxboron

Copy link
Copy Markdown
Owner

Please do tell me if the go-tpm patches takes too much time for you. I'd rather have this merged without a test then having it go stale because you are not able to work on the go-tpm patch :)

Comment thread cmd/ssh-tpm-agent/main.go Resolved
* Allow specifying an owner password when creating the SRK
@Foxboron

Copy link
Copy Markdown
Owner

LGTM.

Thanks for working on this :)

@Foxboron
Foxboron merged commit 1c7bced into Foxboron:master May 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants