Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FAPI: Support intermediate certificates stored in NV ram. #2943

Draft
wants to merge 3 commits into
base: master
Choose a base branch
from

Conversation

JuergenReppSIT
Copy link
Member

  • Add reading of intermediate certificates from NV ram.
  • Add Intel ODCA Root Certificate.
  • Rework Fapi_GetPlatformCertificates.

Addresses: #2934

@JuergenReppSIT JuergenReppSIT marked this pull request as draft February 12, 2025 14:16
@JuergenReppSIT JuergenReppSIT force-pushed the fapi-check-cert-chain branch 3 times, most recently from df89998 to 9756786 Compare February 12, 2025 16:51
@JuergenReppSIT JuergenReppSIT force-pushed the fapi-check-cert-chain branch 4 times, most recently from dd790ad to 7d16413 Compare February 12, 2025 21:36
The reading of concatenated DER certificates in NV ram is simplified.
The creation of a linked list with the certifcates was not needed.

Signed-off-by: Juergen Repp <juergen_repp@web.de>
This certificate will be needed for Intel TPM's where the
intermediate certificates are stored in NV ram.

Signed-off-by: Juergen Repp <juergen_repp@web.de>
TCG's EK credential profile allows the storage of intermediate
certificates in the address range 0x01c00100 - 0x01c001ff.
The EK verification using these certificates if available is now
implemented.

Signed-off-by: Juergen Repp <juergen_repp@web.de>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant