maugustosilva comments

Results 56 comments of


                                            maugustosilva

Website does not have the correct trademark disclaimer

Just to confirm. You are talking about https://keylime.dev, right?

Add new web framework and re-implement existing REST APIs

@mpeters @THS-on @stefanberger @ansasaki @aplanas @sergio-correia Based on discussions during the monthly video-meeting in June/24, we are ready to merge it in the next 24 hours. Please let me know...

Add new web framework and re-implement existing REST APIs

Waiting for one last batch of tests, and then committing. Disclaimer, we are ignoring `CodeQL` and `fedora-rawhide` failures (i.e., these will NOT block the merge).

Add new web framework and re-implement existing REST APIs

> The test failures in Fedora Rawhide and Centos Stream 10 are caused by a regression introduced by `python-requests 2.32.3` which makes it to not load the default CA certificates...

keylime.cert_utils - WARNING - Failed to parse PEM data with python-cryptography: error parsing asn1 value: ParseError { kind: InvalidSetOrdering, location: ["RawCertificate::tbs_cert", "TbsCertificate::issuer", 0, 2] }

We should/could make it more readable indeed, but functionally there is nothing "wrong" here, and WARNING is the correct debug level.

Only send IMA logs if the PCR#10 is set on mask

I have re-checked my experiments, and you're right, MB LOG is disabled unless you pass `--mb_refstate` on `keylime_tenant` CLI, but IMA is "always on", and perhaps we should apply the...