v0.1.0
What's Changed
- quotes_handler: Fix measured boot list encoding by @ansasaki in #369
- Drop privileges after startup by @ansasaki in #364
- CI: Add packit to run end-to-end tests by @ansasaki in #370
- main: Do not try to load CA cert if mTLS is disabled by @ansasaki in #379
- Make support for legacy python revocation actions optional by @ansasaki in #377
- Skip serialization of optional fields by @ansasaki in #381
- OpenSSL on deb family is now libssl-dev by @lukehinds in #387
- Add test /functional/measured-boot-swtpm-sanity to Packit CI plan by @kkaarreell in #386
- quotes_handler: Rewind measured boot log file by @ansasaki in #384
- Add support for hash_ek UUID creation by @THS-on in #385
- Update clap dependency to 3.1.18 by @ansasaki in #394
- Drop unused rustc-serialize and flate2 dependencies and make wiremock optional by @ansasaki in #395
- Adjust CI test name according to keylime-tests PR#125 by @kkaarreell in #397
- Update tokio minimum version by @ansasaki in #398
- persist AK, NK and mTLS certificate to disk by @THS-on in #391
- Add dependabot for automatic dependency updates by @ansasaki in #399
- .github/dependabot.yml: prevent updates that require manifest change by @ueno in #405
- Update fmf plans to run test with IMA policy by @Koncpa in #406
- tpm: Add serialization functions for structures in quotes by @ansasaki in #411
- Show path when fail to load the certificate by @aplanas in #412
- main: Use more descriptive message for missing files error by @ansasaki in #416
- permissions: Set supplementary groups when dropping privileges by @ansasaki in #415
- GNUmakefile: Make target dependencies explicit by @ueno in #421
- Load config file less at startup by @avery-blanchard in #419
- ima_emulator: Support PCR hash algorithms other than SHA-1 by @ueno in #376
- keys_handler: Use scopes to drop mutexes before await by @ansasaki in #422
- Handle whitespace in keylime.conf by @greyspectrum in #409
- Add GitLeaks configuration to ignore RSA key used for testing by @ueno in #430
- Set swtpm context which is later used for test filtering by @kkaarreell in #427
- tpm: Respect ek_handle from config by @ueno in #426
- Fix typo in listen_notifications option in keylime.conf by @kkaarreell in #431
- Use Rust agent-specific config in Makefile by @greyspectrum in #428
- Add run_as in keylime.conf and avoid executing as root by @aplanas in #423
- Fix small comment about TPM ownership by @lkatalin in #434
- Add more helpful error when config file is not found by @lkatalin in #436
- Fix display of mb measurement file path by @lkatalin in #435
- Appease clippy by @lkatalin in #443
- Add agent and faked_measured_boot_log tests context by @kkaarreell in #442
- Add cargo audit to test workflow by @avery-blanchard in #444
- Add tpm_ownerpassword option to keylime.conf by @kkaarreell in #432
- Use the tpm_ownerpassword when generating the EK by @ansasaki in #448
- Improve configuration and change format to TOML by @ansasaki in #449
- Update comments in the configuration file by @ansasaki in #456
New Contributors
- @kkaarreell made their first contribution in #386
- @Koncpa made their first contribution in #406
- @avery-blanchard made their first contribution in #419
Full Changelog: 0.0.1...v0.1.0