Fixes and improvements for secret sealing/unsealing #327
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
* Do not set userWithAuth by default when creating sealed objects. That flag allows password auth for the sealed object. Without the flag it only allows policy auth. * Allow setting policy auth with flags. * Fix secret_unseal to use policy session and valid sealed name. * Added expected failure test cases for seal/unseal with policy. * Improve the run_examples.sh script
dgarske
added a commit
to dgarske/wolfBoot
that referenced
this pull request
Feb 2, 2024
* Fix for sealing policy, which was not being set on creation. * Fix to clear the userWithAuth bit requiring policy Requires: wolfSSL/wolfTPM#327
lealem47
approved these changes
Feb 2, 2024
embhorn
approved these changes
Feb 3, 2024
dgarske
added a commit
to dgarske/wolfBoot
that referenced
this pull request
Feb 3, 2024
* Fix for sealing policy, which was not being set on creation. * Fix to clear the userWithAuth bit requiring policy * Updated wolfTPM submodule with changes in wolfSSL/wolfTPM#327
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Fixes and improvements for secret sealing/unsealing: