rust-keylime
rust-keylime copied to clipboard
Fail adding keylime agent when tenant use --payload and --key options
When is adding keylime agent with with payload and key via tenant command, the adding of agent had failed. For python agent is operation succesfull.
LOG:
2022-09-21 11:55:27.310 - keylime.tenant - ERROR - Posting of Encrypted U to the Cloud Agent failed with response code 500 (base64 decode error: Invalid byte 10, offset 64.) :: [ 11:55:27 ] :: [ FAIL ] :: Command 'keylime_tenant -v 127.0.0.1 -t 127.0.0.1 -u d432fbb3-d2f1-4a97-9ef7-75bd81c00000 --allowlist allowlist.txt --exclude excludelist.txt --payload payload/secret_encrypted.txt --key payload/key.txt -c update' (Expected 0, got 1)
@Koncpa Could you please check if this is still valid?
Hi @ansasaki, I checked it again after IMA policy overhaul merge and I can confirm, that this issue is still valid for upstream rust keylime.
2023-02-10 06:25:48.418 - keylime.tenant - ERROR - Posting of Encrypted U to the Cloud Agent failed with response code 400 ({"code":400,"status":"Invalid base64 encoding in payload: base64 decode error: Invalid byte 10, offset 64.","results":{}})
2023-02-10 06:25:48.418 - keylime.tenant - ERROR - Posting of Encrypted U to the Cloud Agent failed with response code 400 ({"code":400,"status":"Invalid base64 encoding in payload: base64 decode error: Invalid byte 10, offset 64.","results":{}})
This looks like an issue on the tenant that is not correctly encoding the payload as base64.