WIP: EK Cert Verification (no wolfCrypt).

wolfSSL · Jan 19, 2025 · 55c78c6 · 55c78c6
1 parent bcf2647
commit 55c78c6
Show file tree

Hide file tree

Showing 4 changed files with 327 additions and 2 deletions.
diff --git a/examples/endorsement/endorsement.h b/examples/endorsement/endorsement.h
@@ -27,6 +27,7 @@
 #endif
 
 int TPM2_EndorsementCert_Example(void* userCtx, int argc, char *argv[]);
+int TPM2_EndorsementCertVerify_Example(void* userCtx, int argc, char *argv[]);
 
 #ifdef __cplusplus
     }  /* extern "C" */

diff --git a/examples/endorsement/get_ek_certs.c b/examples/endorsement/get_ek_certs.c
@@ -385,6 +385,9 @@ int TPM2_EndorsementCert_Example(void* userCtx, int argc, char *argv[])
                 printf("Endorsement Cert PEM\n");
                 puts(pem);
             }
+
+            XFREE(pem, NULL, DYNAMIC_TYPE_TMP_BUFFER);
+            pem = NULL;
         #endif /* WOLFSSL_DER_TO_PEM */
         }
     #endif /* !WOLFTPM2_NO_WOLFCRYPT && !NO_ASN */

diff --git a/examples/endorsement/include.am b/examples/endorsement/include.am
@@ -10,11 +10,19 @@ if BUILD_EXAMPLES
   examples_endorsement_get_ek_certs_SOURCES      = examples/endorsement/get_ek_certs.c
   examples_endorsement_get_ek_certs_LDADD        = src/libwolftpm.la $(LIB_STATIC_ADD)
   examples_endorsement_get_ek_certs_DEPENDENCIES = src/libwolftpm.la
+
+  noinst_PROGRAMS += examples/endorsement/verify_ek_cert
+  examples_endorsement_verify_ek_cert_SOURCES      = examples/endorsement/verify_ek_cert.c
+  examples_endorsement_verify_ek_cert_LDADD        = src/libwolftpm.la $(LIB_STATIC_ADD)
+  examples_endorsement_verify_ek_cert_DEPENDENCIES = src/libwolftpm.la
 endif
 
 EXTRA_DIST+=examples/endorsement/README.md
 example_endorsementdir = $(exampledir)/endorsement
 dist_example_endorsement_DATA = \
-  examples/endorsement/get_ek_certs.c
+  examples/endorsement/get_ek_certs.c \
+  examples/endorsement/verify_ek_cert.c
 
-DISTCLEANFILES+= examples/endorsement/.libs/get_ek_certs
+DISTCLEANFILES+= \
+  examples/endorsement/.libs/get_ek_certs \
+  examples/endorsement/.libs/verify_ek_cert