Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2025-07-24 07:50:40 -04:00
Code Issues Projects Releases Packages Wiki Activity

attestation: print ordered measurement verification warnings and errors (#2237)

Browse source 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
This commit is contained in:
Daniel Weiße 2023-08-16 10:45:54 +02:00 • committed by GitHub
parent 78fa921746
commit 103817a4a5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
5 changed files with 184 additions and 25 deletions
Download patch file Download diff file Expand all files Collapse all files

115
internal/attestation/measurements/measurements_test.go
View file

@ -7,6 +7,7 @@ SPDX-License-Identifier: AGPL-3.0-only
package measurements
import (
"bytes"
"context"
"encoding/json"
"io"
@ -928,3 +929,117 @@ func TestMergeImageMeasurementsV2(t *testing.T) {
})
}
}
func TestMeasurementsCompare(t *testing.T) {
testCases := map[string]struct {
expected M
actual map[uint32][]byte
wantErrs int
wantWarnings int
}{
"no errors": {
expected: M{
0: WithAllBytes(0x00, Enforce, PCRMeasurementLength),
1: WithAllBytes(0x11, Enforce, PCRMeasurementLength),
},
actual: map[uint32][]byte{
0: bytes.Repeat([]byte{0x00}, PCRMeasurementLength),
1: bytes.Repeat([]byte{0x11}, PCRMeasurementLength),
},
wantErrs: 0,
wantWarnings: 0,
},
"no errors, with warnings": {
expected: M{
0: WithAllBytes(0x00, Enforce, PCRMeasurementLength),
1: WithAllBytes(0x11, WarnOnly, PCRMeasurementLength),
2: WithAllBytes(0x22, WarnOnly, PCRMeasurementLength),
},
actual: map[uint32][]byte{
0: bytes.Repeat([]byte{0x00}, PCRMeasurementLength),
1: bytes.Repeat([]byte{0xFF}, PCRMeasurementLength),
2: bytes.Repeat([]byte{0xFF}, PCRMeasurementLength),
},
wantErrs: 0,
wantWarnings: 2,
},
"with errors, no warnings": {
expected: M{
0: WithAllBytes(0x00, Enforce, PCRMeasurementLength),
1: WithAllBytes(0x11, Enforce, PCRMeasurementLength),
2: WithAllBytes(0x22, Enforce, PCRMeasurementLength),
},
actual: map[uint32][]byte{
0: bytes.Repeat([]byte{0x00}, PCRMeasurementLength),
1: bytes.Repeat([]byte{0xFF}, PCRMeasurementLength),
2: bytes.Repeat([]byte{0xFF}, PCRMeasurementLength),
},
wantErrs: 2,
wantWarnings: 0,
},
"with errors and warnings": {
expected: M{
0: WithAllBytes(0x00, Enforce, PCRMeasurementLength),
1: WithAllBytes(0x11, WarnOnly, PCRMeasurementLength),
2: WithAllBytes(0x22, Enforce, PCRMeasurementLength),
},
actual: map[uint32][]byte{
0: bytes.Repeat([]byte{0x00}, PCRMeasurementLength),
1: bytes.Repeat([]byte{0xFF}, PCRMeasurementLength),
2: bytes.Repeat([]byte{0xFF}, PCRMeasurementLength),
},
wantErrs: 1,
wantWarnings: 1,
},
"extra measurements don't cause errors": {
expected: M{
0: WithAllBytes(0x00, Enforce, PCRMeasurementLength),
1: WithAllBytes(0x11, Enforce, PCRMeasurementLength),
},
actual: map[uint32][]byte{
0: bytes.Repeat([]byte{0x00}, PCRMeasurementLength),
1: bytes.Repeat([]byte{0x11}, PCRMeasurementLength),
2: bytes.Repeat([]byte{0x22}, PCRMeasurementLength),
},
wantErrs: 0,
wantWarnings: 0,
},
"missing measurements cause errors": {
expected: M{
0: WithAllBytes(0x00, Enforce, PCRMeasurementLength),
1: WithAllBytes(0x11, Enforce, PCRMeasurementLength),
2: WithAllBytes(0x22, Enforce, PCRMeasurementLength),
},
actual: map[uint32][]byte{
0: bytes.Repeat([]byte{0x00}, PCRMeasurementLength),
1: bytes.Repeat([]byte{0x11}, PCRMeasurementLength),
},
wantErrs: 1,
wantWarnings: 0,
},
"missing measurements cause warnings": {
expected: M{
0: WithAllBytes(0x00, Enforce, PCRMeasurementLength),
1: WithAllBytes(0x11, Enforce, PCRMeasurementLength),
2: WithAllBytes(0x22, WarnOnly, PCRMeasurementLength),
},
actual: map[uint32][]byte{
0: bytes.Repeat([]byte{0x00}, PCRMeasurementLength),
1: bytes.Repeat([]byte{0x11}, PCRMeasurementLength),
},
wantErrs: 0,
wantWarnings: 1,
},
}
for name, tc := range testCases {
t.Run(name, func(t *testing.T) {
assert := assert.New(t)
gotWarnings, gotErrs := tc.expected.Compare(tc.actual)
assert.Equal(tc.wantErrs, len(gotErrs))
assert.Equal(tc.wantWarnings, len(gotWarnings))
})
}
}