Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: AttestationStatement::TPM#valid? blowing up when using libssl 1.0.2 #314

Merged
merged 1 commit into from
Jun 5, 2020

Conversation

santiagorodriguez96
Copy link
Contributor

@santiagorodriguez96 santiagorodriguez96 commented May 25, 2020

What

AttestationStatement::TPM#valid? is blowing up when using libssl v1.0.2.
The error was inside TPM Key Attestation – see cedarcode/tpm-key_attestation#5 – so we must update that dependency.

Steps Taken

  • - Write tests for reproducing bugs
  • - Fix bug by updating the tpm-key_attestation gem

References

.travis.yml Show resolved Hide resolved
install-openssl.sh Outdated Show resolved Hide resolved
install-ruby.sh Outdated Show resolved Hide resolved
install-ruby.sh Outdated Show resolved Hide resolved
.travis.yml Outdated
- gemfile: gemfiles/cose_head.gemfile
- gemfile: gemfiles/openssl_head.gemfile

before_install:
- ./install-openssl.sh
- ./install-ruby.sh
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we put these inside a script/ci/ folder?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sure! I would like to keep both files though, in order to be explicit of what's being installed without having to find the script and open it to see what it's being done.
What do you think?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's OK

@santiagorodriguez96 santiagorodriguez96 marked this pull request as ready for review June 1, 2020 14:24
@santiagorodriguez96 santiagorodriguez96 force-pushed the fix_tpm_attestation_statement_valid branch from afc6fd8 to e83a3e8 Compare June 1, 2020 14:51
Copy link
Contributor

@grzuy grzuy left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👏

.travis.yml Outdated
- gemfile: gemfiles/cose_head.gemfile
- gemfile: gemfiles/openssl_head.gemfile

before_install:
- ./script/ci/install-openssl.sh
- ./script/ci/install-ruby.sh
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we remove the extension?
Not needed and not standard to use it.

@santiagorodriguez96 santiagorodriguez96 force-pushed the fix_tpm_attestation_statement_valid branch from e83a3e8 to 2e01e6a Compare June 4, 2020 13:12
The build is failing when using libssl v1.0.2 and we haven't noticed
until now since we aren't testing against that version in Travis.

In order to fix compatibility these issues with OpenSSL 1.0 we have to
update the gem tpm-key_attestation which is the one that it was failing.
@santiagorodriguez96 santiagorodriguez96 force-pushed the fix_tpm_attestation_statement_valid branch from 5803693 to 6d2c708 Compare June 4, 2020 17:27
@grzuy grzuy merged commit b71b518 into master Jun 5, 2020
@grzuy grzuy deleted the fix_tpm_attestation_statement_valid branch June 5, 2020 00:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants