wolfTPM

Author	SHA1	Message	Date
David Garske	eed7803e96	Fixes for building wolfTPM examples with NO_FILESYSTEM. Tested with `./configure --enable-swtpm CFLAGS="-DNO_FILESYSTEM" && make`.	2024-03-22 14:24:18 -07:00
David Garske	b395b65287	Fix for config.h, which should only be included from .c files, not headers. ZD 17473	2024-02-07 14:28:33 -08:00
David Garske	c34a0c2786	Fixes and improvements for secret sealing/unsealing: * Do not set userWithAuth by default when creating sealed objects. That flag allows password auth for the sealed object. Without the flag it only allows policy auth. * Allow setting policy auth with flags. * Fix secret_unseal to use policy session and valid sealed name. * Added expected failure test cases for seal/unseal with policy. * Improve the run_examples.sh script	2024-02-02 14:45:44 -08:00
David Garske	e2d502e773	Peer review fixes and getting CI to pass.	2023-08-31 09:53:39 -07:00
David Garske	78cd7190be	Cleanups from testing.	2023-08-30 11:21:43 -07:00
David Garske	a15260342f	wolfTPM Support for sealing/unsealing based on a PCR that is signed externally. Use an external key to sign a PCR digest. Allows a new signed policy to be sent with updates to continue allowing a sealed secret to be unsealed when PCR's change. This resolves the issue with PCR brittleness.	2023-08-29 18:47:18 -07:00