Skip to content

Releases: keylime/rust-keylime

v0.2.8

08 Aug 16:38

Choose a tag to compare

What's Changed

  • dist: Enable logging for keylime library in the service by @ansasaki in #922
  • build(deps): bump tokio from 1.42.0 to 1.43.0 by @dependabot[bot] in #913
  • build(deps): bump openssl from 0.10.68 to 0.10.70 by @dependabot[bot] in #926
  • scripts: Fix coverage information downloading script by @ansasaki in #934
  • Allow agent to start without root privileges by @sgebauer in #935
  • build(deps): bump tempfile from 3.14.0 to 3.17.1 by @dependabot[bot] in #938
  • build(deps): bump thiserror from 2.0.9 to 2.0.11 by @dependabot[bot] in #906
  • build(deps): bump serde_json from 1.0.135 to 1.0.138 by @dependabot[bot] in #924
  • build(deps): bump uuid from 1.11.0 to 1.13.2 by @dependabot[bot] in #937
  • packit: Add compatibility/api_version_compatibility test by @ansasaki in #948
  • Add capabilities_negotiation structures by @sarroutbi in #945
  • build(deps): bump uuid from 1.13.2 to 1.15.1 by @dependabot[bot] in #950
  • build(deps): bump openssl from 0.10.70 to 0.10.71 by @dependabot[bot] in #940
  • keylime-agent.conf: only mention ecdsa and rsassa for signing by @THS-on in #952
  • packit: Add identifier for each copr_build job by @ansasaki in #943
  • build(deps): bump serde_json from 1.0.138 to 1.0.140 by @dependabot[bot] in #954
  • Update push model structures to latest values by @sarroutbi in #961
  • Recover key_class field and set it as "asymmetric" by @sarroutbi in #966
  • Add support for ek certificate chain (stored in TPM NVRAM), resolves #1552 by @ematery in #951
  • Push model prototype by @sarroutbi in #964
  • Code refactoring: Include AgentIdentity by @sarroutbi in #925
  • build(deps): bump tokio from 1.43.0 to 1.44.2 by @dependabot[bot] in #973
  • Move SymmKey from common to the keylime library by @ansasaki in #975
  • build(deps): bump openssl from 0.10.71 to 0.10.72 by @dependabot[bot] in #972
  • Move AuthTag and EncryptedData from the common.rs to the Keylime library by @ansasaki in #976
  • Do not use certificate on insecure mode by @sarroutbi in #980
  • Add logging to the push attestation prototype by @ansasaki in #981
  • Cargo: bump url crate to version 2.5.4 by @ansasaki in #982
  • Add client certificates to push-attestation prototype by @ansasaki in #984
  • Add mockoon test scenario by @sarroutbi in #979
  • Define EvidenceHandling structures by @sarroutbi in #971
  • Fix minor README.md issue by @sarroutbi in #988
  • Add auth(sessions) structures by @sergio-correia in #987
  • build(deps): bump serde from 1.0.217 to 1.0.219 by @dependabot[bot] in #955
  • build(deps): bump reqwest from 0.12.12 to 0.12.15 by @dependabot[bot] in #960
  • build(deps): bump actix-web from 4.9.0 to 4.10.2 by @dependabot[bot] in #958
  • build(deps): bump assert_cmd from 2.0.16 to 2.0.17 by @dependabot[bot] in #992
  • build(deps): bump log from 0.4.25 to 0.4.27 by @dependabot[bot] in #991
  • build(deps): bump signal-hook from 0.3.17 to 0.3.18 by @dependabot[bot] in #993
  • build(deps): bump thiserror from 2.0.11 to 2.0.12 by @dependabot[bot] in #995
  • build(deps): bump uuid from 1.15.1 to 1.16.0 by @dependabot[bot] in #994
  • Integrate Evidence Handling/Authentication messages to push attestation prototype by @sarroutbi in #990
  • build(deps): bump libc from 0.2.169 to 0.2.172 by @dependabot[bot] in #996
  • build(deps): bump pest from 2.7.15 to 2.8.0 by @dependabot[bot] in #998
  • build(deps): bump pest_derive from 2.7.15 to 2.8.0 by @dependabot[bot] in #1000
  • Move structure filling and URL selection related code to specific modules by @sarroutbi in #999
  • Refactor code: move error and registration to lib by @sarroutbi in #1004
  • build(deps): bump tempfile from 3.17.1 to 3.20.0 by @dependabot[bot] in #1003
  • build(deps): bump chrono from 0.4.40 to 0.4.41 by @dependabot[bot] in #1001
  • build(deps): bump tokio from 1.44.2 to 1.45.0 by @dependabot[bot] in #1006
  • Add registration for Push Model client by @sarroutbi in #1005
  • build(deps): bump clap from 4.5.23 to 4.5.38 by @dependabot[bot] in #989
  • Avoid duplicated call to ctx.create_ek by @sarroutbi in #1010
  • Enable different key sizes and curves for EK and AK by @THS-on in #846
  • Remove configuration file trailing whitespaces by @sarroutbi in #1012
  • Add Quote related structures to Keylime library by @sarroutbi in #1013
  • Unify Push Model structures time formats to UTC by @sarroutbi in #1016
  • build(deps): bump tokio from 1.45.0 to 1.45.1 by @dependabot[bot] in #1008
  • build(deps): bump clap from 4.5.38 to 4.5.39 by @dependabot[bot] in #1011
  • Move Agent identity information from the RegistrarClient structure to the new structure AgentIdentity by @ansasaki in #1017
  • build(deps): bump uuid from 1.16.0 to 1.17.0 by @dependabot[bot] in #1007
  • build(deps): bump wiremock from 0.6.2 to 0.6.3 by @dependabot[bot] in #977
  • Extract Capabilities Negotiation info from TPM by @sarroutbi in #1014
  • Move reusable code from keylime-agent to the keylime library by @ansasaki in #1018
  • build(deps): bump once_cell from 1.19.0 to 1.21.3 by @dependabot[bot] in #1019
  • Push Model: Add IMA log parser to send correct entry count by @sarroutbi in #1026
  • Add UEFI log handler, use it to send UEFI count by @sarroutbi in #1022
  • Fix race conditions in tests by @ansasaki in #1028
  • tests: Do not assume /var/lib/keylime exists by @ansasaki in #1030
  • Use singleton to avoid multiple Context allocation by @sarroutbi in #1029
  • Add Keylime push model binary to root GNUmakefile by @sarroutbi in #1031
  • Push Model: Persist Attestation Key to file by @sarroutbi in #1032
  • Send correct 'key_algorithm' in certification_keys by @sarroutbi in #1035
  • Send Content-Type:application/json on request by @sarroutbi in #1039
  • Fix pcr_bank function to send all slots by @sarroutbi in #1036
  • config: Unify configuration for pull and push agents by @ansasaki in #1037
  • Add disallowed_signing_algorithms, avoid ecschnorr by @sarroutbi in #1034
  • Push Model: Perform attestation (quote, uefi and ima logs) by @sarroutbi in #1038
  • Fix clippy warnings about uninlined format arguments by @ansasaki in #1042
  • context_info_handler: Do not assume /var/lib/keylime exists by @ansasaki in #1044
  • Fix UEFI test to check file access in all cases by @sarroutbi in #1045
  • Add Capabilities Negotiations resp. missing fields by @sarroutbi in #1046
  • Increase coverage in evidence handling structure by @sarroutbi in https://github.com/...
Read more

v0.2.7

20 Jan 10:03

Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v0.2.6...v0.2.7

v0.2.6

11 Jun 07:44

Choose a tag to compare

What's Changed

Full Changelog: v0.2.5...v0.2.6

v0.2.5

30 Apr 16:06

Choose a tag to compare

What's Changed

Full Changelog: v0.2.4...v0.2.5

v0.2.4

31 Jan 09:19

Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v0.2.3...v0.2.4

v0.2.3

24 Nov 18:08

Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v0.2.2...v0.2.3

v0.2.2

13 Jul 14:42

Choose a tag to compare

What's Changed

  • [tests] Simply coverage file URL parsing by @kkaarreell in #592
  • [tests] Update test coverage task name regexp by @kkaarreell in #593
  • docker/fedora/keylime_rust.Dockerfile: add the logic of cloning and compiling rust-keylime by @hustliyilin in #584
  • keylime-agent/src: update API version to 2.1 to consistent with https//github.com/keylime/keylime/blob/master/docs/rest_apis.rst by @hustliyilin in #588
  • rpm: Remove unused directory and add dependency for mount by @ansasaki in #598
  • Remove MOUNT_SECURE bool by @Koncpa in #595
  • [packit] Do not let COPR project expire by @kkaarreell in #600
  • Add secure mount sanity test to packit testing by @Koncpa in #602
  • build(deps): bump openssl from 0.10.48 to 0.10.55 by @dependabot in #605
  • Parse lists from configuration file by @ansasaki in #604
  • cargo: Bump proc-macro2 crate version by @ansasaki in #609
  • main: Gracefully shutdown on SIGTERM or SIGINT by @ansasaki in #613
  • Add an example of IMA policy by @aplanas in #536
  • cargo: Bump tokio crate version to 1.28.2 by @ansasaki in #610
  • Bump clap to version 4.3.11 by @ansasaki in #614
  • hash: add more configurable hash algorithm for public key digest by @dongx1x in #611
  • Adding release Dockerfiles by @mheese in #601
  • build(deps): bump libc from 0.2.142 to 0.2.147 by @dependabot in #615
  • cargo: Bump serde to version 1.0.166 by @ansasaki in #617
  • Removing SIGINT stop signals from Dockerfiles and systemd service by @mheese in #620
  • build(deps): bump tempfile from 3.5.0 to 3.6.0 by @dependabot in #621
  • Bump version to 0.2.2 by @ansasaki in #619

New Contributors

Full Changelog: v0.2.1...v0.2.2

v0.2.1

27 Apr 09:25

Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v0.2.0...v0.2.1

v0.2.0

21 Feb 18:20

Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v0.1.0...v0.2.0

v0.1.0

21 Sep 17:03

Choose a tag to compare

What's Changed

  • quotes_handler: Fix measured boot list encoding by @ansasaki in #369
  • Drop privileges after startup by @ansasaki in #364
  • CI: Add packit to run end-to-end tests by @ansasaki in #370
  • main: Do not try to load CA cert if mTLS is disabled by @ansasaki in #379
  • Make support for legacy python revocation actions optional by @ansasaki in #377
  • Skip serialization of optional fields by @ansasaki in #381
  • OpenSSL on deb family is now libssl-dev by @lukehinds in #387
  • Add test /functional/measured-boot-swtpm-sanity to Packit CI plan by @kkaarreell in #386
  • quotes_handler: Rewind measured boot log file by @ansasaki in #384
  • Add support for hash_ek UUID creation by @THS-on in #385
  • Update clap dependency to 3.1.18 by @ansasaki in #394
  • Drop unused rustc-serialize and flate2 dependencies and make wiremock optional by @ansasaki in #395
  • Adjust CI test name according to keylime-tests PR#125 by @kkaarreell in #397
  • Update tokio minimum version by @ansasaki in #398
  • persist AK, NK and mTLS certificate to disk by @THS-on in #391
  • Add dependabot for automatic dependency updates by @ansasaki in #399
  • .github/dependabot.yml: prevent updates that require manifest change by @ueno in #405
  • Update fmf plans to run test with IMA policy by @Koncpa in #406
  • tpm: Add serialization functions for structures in quotes by @ansasaki in #411
  • Show path when fail to load the certificate by @aplanas in #412
  • main: Use more descriptive message for missing files error by @ansasaki in #416
  • permissions: Set supplementary groups when dropping privileges by @ansasaki in #415
  • GNUmakefile: Make target dependencies explicit by @ueno in #421
  • Load config file less at startup by @avery-blanchard in #419
  • ima_emulator: Support PCR hash algorithms other than SHA-1 by @ueno in #376
  • keys_handler: Use scopes to drop mutexes before await by @ansasaki in #422
  • Handle whitespace in keylime.conf by @greyspectrum in #409
  • Add GitLeaks configuration to ignore RSA key used for testing by @ueno in #430
  • Set swtpm context which is later used for test filtering by @kkaarreell in #427
  • tpm: Respect ek_handle from config by @ueno in #426
  • Fix typo in listen_notifications option in keylime.conf by @kkaarreell in #431
  • Use Rust agent-specific config in Makefile by @greyspectrum in #428
  • Add run_as in keylime.conf and avoid executing as root by @aplanas in #423
  • Fix small comment about TPM ownership by @lkatalin in #434
  • Add more helpful error when config file is not found by @lkatalin in #436
  • Fix display of mb measurement file path by @lkatalin in #435
  • Appease clippy by @lkatalin in #443
  • Add agent and faked_measured_boot_log tests context by @kkaarreell in #442
  • Add cargo audit to test workflow by @avery-blanchard in #444
  • Add tpm_ownerpassword option to keylime.conf by @kkaarreell in #432
  • Use the tpm_ownerpassword when generating the EK by @ansasaki in #448
  • Improve configuration and change format to TOML by @ansasaki in #449
  • Update comments in the configuration file by @ansasaki in #456

New Contributors

Full Changelog: 0.0.1...v0.1.0