Activity for TrouSerS

Roland Illig created ticket #239

Roland Illig — Sat, 18 Apr 2026 17:39:13 -0000

Typo in support.h multiple-inclusion guard

deitch posted a comment on ticket #211

deitch — Mon, 06 Jan 2025 17:41:44 -0000

I just stumbled across this problem again when rebuilding trousers, went hunting, and found this issue from 7 years ago. To my surprise, I opened it! Well, I knew it looked familiar. Is there any way we can move it forward?

Abhinav MS posted a comment on ticket #238

Abhinav MS — Thu, 28 Nov 2024 08:13:49 -0000

It is not a trousers issue.. TPM module is having more read write hits in the latest kernel causing the crash... Trying to pin point the exact code causing this

Abhinav MS created ticket #238

Abhinav MS — Wed, 20 Nov 2024 11:59:59 -0000

TrouSerS not working with linux 6.8 kernel

Ken Goldman posted a comment on ticket #237

Ken Goldman — Wed, 01 Nov 2023 19:33:10 -0000

I don't know the implementation of tpm_restrictsrk . It's not a TPM command. At a high level, there is a flag readSRKPub which permits an unauthorized read of the SRK. Once clear, it needs owner auth. TPM 1.2 is old and obsolete, so you may not get any other responses. If you can use a SW TPM and send me the traces (email), I can see what the command is doing and why it's failing.

Oskar Enoksson modified a comment on ticket #237

Oskar Enoksson — Wed, 01 Nov 2023 17:46:57 -0000

Although ... the command tpm_restrictsrk -a actually seems non-working: # tpm_restrictsrk -a Enter owner password: # tpm_restrictsrk -s Enter owner password: Storage Root Key readable with: owner auth # I expected the SRK readable without owner auth (with SRK auth) after successful tpm_restrictsrk -a My TPM chip is SLB9660: # tpm_version TPM 1.2 Version Info: Chip Version: 1.2.4.40 Spec Level: 2 Errata Revision: 3 TPM Vendor ID: IFX Vendor Specific data: 04280077 0074706d 3631ffff ff TPM Version:...

Oskar Enoksson posted a comment on ticket #237

Oskar Enoksson — Wed, 01 Nov 2023 17:46:02 -0000

Although ... the command tpm_restrictsrk -a actually seems non-working: # tpm_restrictsrk -a Enter owner password: # tpm_restrictsrk -s Enter owner password: Storage Root Key readable with: owner auth # I expected the SRK readable without owner auth after successful tpm_restrictsrk -a My TPM chip is SLB9660: # tpm_version TPM 1.2 Version Info: Chip Version: 1.2.4.40 Spec Level: 2 Errata Revision: 3 TPM Vendor ID: IFX Vendor Specific data: 04280077 0074706d 3631ffff ff TPM Version: 01010000 Manufacturer...

Oskar Enoksson posted a comment on ticket #237

Oskar Enoksson — Wed, 01 Nov 2023 16:48:21 -0000

Oops. My mistake. I had the impression that the -z flag to this command would reset the SRK password to all zeros. Not so. tpm_changeownerauth -s -r resets the SRK password. Help text for tpm_restrictsrk as below: Usage: tpm_restrictsrk [options] -h, --help Display command usage info. -v, --version Display command version info. -l, --log [none|error|info|debug] Set logging level. -u, --unicode Use TSS UNICODE encoding for passwords to comply with applications using TSS popup boxes -a, --allow Allow...

Ken Goldman posted a comment on ticket #237

Ken Goldman — Wed, 01 Nov 2023 13:50:22 -0000

I don't know what this command does, but the error message implies a bad authorization value. -z says to use all zeros as the authorization value. Perhaps the authorization value is not all zeros. If you use a SW TPM, it will dump internal operations and help you / us debug.

Oskar Enoksson created ticket #237

Oskar Enoksson — Wed, 01 Nov 2023 08:13:50 -0000

tpm_restrictsrk -z fails with "Authentication failed"

Dhruv created ticket #236

Dhruv — Thu, 31 Aug 2023 20:01:17 -0000

SRK not found in persistent storage after reboot

Daniel created ticket #235

Daniel — Mon, 23 Jan 2023 18:55:34 -0000

Impossible to call TPM_Tools tpm_setpresence --disable-hw

Fabrice Fontaine posted a comment on ticket #234

Fabrice Fontaine — Sun, 10 Apr 2022 15:35:51 -0000

Duplicate of https://sourceforge.net/p/trousers/bugs/222/ so this one should be closed

Fabrice Fontaine created ticket #234

Fabrice Fontaine — Sun, 10 Apr 2022 15:30:21 -0000

Build failure with libressl >= 2.5.0

Laurent Bigonville modified a comment on ticket #233

Laurent Bigonville — Thu, 10 Jun 2021 13:08:50 -0000

I see this commit: https://sourceforge.net/p/trousers/tpm-tools/ci/8f253fbc61b8afb6a5d341090bba31dada29dffd/ that fixed an other occurrence of this apparently Edit: Is that patch actually correct?

Laurent Bigonville posted a comment on ticket #233

Laurent Bigonville — Thu, 10 Jun 2021 12:27:26 -0000

I see this commit: https://sourceforge.net/p/trousers/tpm-tools/ci/8f253fbc61b8afb6a5d341090bba31dada29dffd/ that fixed an other occurrence of this apparently

Laurent Bigonville posted a comment on ticket #199

Laurent Bigonville — Thu, 10 Jun 2021 11:04:10 -0000

Any new about this bug? This breaks the build on x32 architecture as the target is x86_64-pc-linux-gnux32 The compiler should already know what to do for the target architecture without this flag

Laurent Bigonville posted a comment on ticket #227

Laurent Bigonville — Thu, 10 Jun 2021 10:58:51 -0000

Isn't openssl 1.1 supported now? That should be closed

Laurent Bigonville created ticket #233

Laurent Bigonville — Thu, 10 Jun 2021 10:57:35 -0000

tpm_nvcommon.c:167:31: warning: comparison of constant ‘124’ with boolean expression is always false [-Wbool-compare]

Stefan Strogin created merge request #2

Stefan Strogin — Tue, 24 Nov 2020 09:21:44 -0000

trousers: do not re-declare RSA_set0_key with LibreSSL

Fabrice Fontaine created merge request #1

Fabrice Fontaine — Wed, 04 Nov 2020 19:34:46 -0000

Check that getpwent_r is available before using it

TrouSerS released /tpm-tools/1.3.9.2/tpm-tools-1.3.9.2.tar.gz

TrouSerS — Tue, 03 Nov 2020 13:15:02 -0000

TrouSerS released /trousers/0.3.15/trousers-0.3.15.tar.gz

TrouSerS — Tue, 03 Nov 2020 13:11:03 -0000

Debora Velarde Babb committed [bf4383]

Debora Velarde Babb — Tue, 03 Nov 2020 12:19:49 -0000

Bumped version to 1.3.9.2

Debora Velarde Babb committed [94144b]

Debora Velarde Babb — Tue, 03 Nov 2020 11:39:10 -0000

Bumped version to 0.3.15

Debora Velarde Babb committed [d3fefa]

Debora Velarde Babb — Tue, 03 Nov 2020 10:26:08 -0000

dist: install tcsd.conf as root:tss 0640

Debora Velarde Babb committed [af2721]

Debora Velarde Babb — Thu, 08 Oct 2020 08:54:05 -0000

Fix build with OpenSSL 1.1 due to EVP_PKEY being an opaque struct

Debora Velarde Babb committed [49b9a9]

Debora Velarde Babb — Thu, 08 Oct 2020 08:54:05 -0000

Fix build with OpenSSL 1.1 due to RSA being an opaque struct

Debora Velarde Babb committed [b7c185]

Debora Velarde Babb — Thu, 08 Oct 2020 03:44:16 -0000

tpm-tools: manpage cleanup

Debora Velarde Babb committed [331865]

Debora Velarde Babb — Mon, 05 Oct 2020 01:49:53 -0000

tpm-tools: don't use __no_optimize

Debora Velarde Babb committed [6edef3]

Debora Velarde Babb — Mon, 05 Oct 2020 01:46:12 -0000

trousers: don't use __no_optimize

Debora Velarde Babb committed [4486c9]

Debora Velarde Babb — Thu, 01 Oct 2020 09:33:58 -0000

Support using PCRs 15-23 for sealing data

Debora Velarde Babb committed [e74dd1]

Debora Velarde Babb — Sat, 15 Aug 2020 05:30:49 -0000

Correct multiple security issues that are present if the tcsd

Debora Velarde Babb committed [48d278]

Debora Velarde Babb — Fri, 17 Jul 2020 08:51:45 -0000

trousers: fix potential use after free in ima_get_entry

Debora Velarde Babb committed [44f582]

Debora Velarde Babb — Fri, 17 Jul 2020 08:51:45 -0000

Merge branch 'master' of ssh://git.code.sf.net/p/trousers/trousers

Debora Velarde Babb committed [10b338]

Debora Velarde Babb — Fri, 17 Jul 2020 08:00:13 -0000

trousers: clean up use after free in Transport_TerminateHandle

Debora Velarde Babb committed [0a14b9]

Debora Velarde Babb — Fri, 17 Jul 2020 08:00:13 -0000

trousers: clean up use after free in Transport_TerminateHandle

fis posted a comment on ticket #232

fis — Thu, 02 Jul 2020 23:18:04 -0000

I forgot to mention it is debian 10.4 package v. 0.3.14+fixed1-1

fis created ticket #232

fis — Thu, 02 Jul 2020 22:16:44 -0000

tcsd crashes when DNS server is not available

Debora Velarde Babb committed [c9b8c4]

Debora Velarde Babb — Thu, 11 Jun 2020 08:46:32 -0000

trousers: resolve build failure

klondike created merge request #4

klondike — Mon, 04 Nov 2019 21:11:06 -0000

tpm_sealdata: Allow setting PCR values

Dimitris created ticket #231

Dimitris — Fri, 18 Oct 2019 08:52:29 -0000

Retry to transmit data in req_mgr_submit_req causing TDDL_E_INSUFFICIENT_BUFFER incorrectly

Ricky Tigg created ticket #230

Ricky Tigg — Mon, 19 Aug 2019 09:17:52 -0000

Hardware with TPM 1.2 chip not supported by Trousers.

Debora V. Babb committed [8a867e]

Debora V. Babb — Tue, 18 Jun 2019 08:05:31 -0000

Added Vicky as a contributor

Debora V. Babb committed [5dea0b]

Debora V. Babb — Tue, 18 Jun 2019 07:52:00 -0000

updated maintainer info

Thomas created ticket #229

Thomas — Thu, 31 Jan 2019 14:24:34 -0000

Tspi_Context_Close is blocked when it is called a second time in a process. (Missing MUTEX_UNLOCK in get_user_ps_path function)

Alon Bar-Lev created ticket #228

Alon Bar-Lev — Sat, 08 Dec 2018 21:54:23 -0000

[openssl-tpm-enigne] openssl-1.1 support

Alon Bar-Lev created ticket #227

Alon Bar-Lev — Sat, 08 Dec 2018 21:35:37 -0000

[tpm-tools] openssl-1.1 support

debora modified ticket #219

debora — Tue, 04 Dec 2018 19:18:21 -0000

tpm_nvread - 'No space to load key'

Laurent Bigonville posted a comment on ticket #225

Laurent Bigonville — Sun, 18 Nov 2018 13:35:02 -0000

Actually tpm_resetdalock is not the only one, tpm_unsealdata also doesn't list the -u option

Laurent Bigonville created ticket #226

Laurent Bigonville — Sat, 17 Nov 2018 12:35:20 -0000

Please indicate in the manpage that tpm_restrictpubek is permanant

Laurent Bigonville created ticket #225

Laurent Bigonville — Fri, 16 Nov 2018 19:16:33 -0000

tpm_resetdalock doesn't list -u option

Michael Cronenworth posted a comment on ticket #224

Michael Cronenworth — Sat, 03 Nov 2018 19:19:45 -0000

To be specific: src/tspi/ps/ps_utils.c: read_data(int fd, void *data, UINT32 size)

Michael Cronenworth created ticket #224

Michael Cronenworth — Sat, 03 Nov 2018 19:11:06 -0000

Rename the shared symbol read_data

Tomasz Kazimierczak created ticket #223

Tomasz Kazimierczak — Wed, 23 May 2018 18:17:33 -0000

Libtspi der/ber encoding/decoding machinery fails with libssl1.1

Alon Bar-Lev posted a comment on ticket #199

Alon Bar-Lev — Mon, 23 Apr 2018 10:55:12 -0000

please, this flag must be removed and determined by the toolchain, packages should not set this flag as it damage some of the configuration, for example building 32bit on amd64 or the new abi of linux. no package should enforce cpu specific flags. at gentoo maintainer I need to patch this package every new release.

Bernard Spil created ticket #222

Bernard Spil — Sun, 01 Apr 2018 20:23:39 -0000

Fix build with LibreSSL 2.7

Susan Hinrichs posted a comment on ticket #221

Susan Hinrichs — Thu, 29 Mar 2018 21:37:02 -0000

Sorry, it is been a long time since I created a patch file outside of git. I've attached a proper patch file.

Susan Hinrichs created ticket #221

Susan Hinrichs — Thu, 29 Mar 2018 21:04:02 -0000

Segfault on tcsd thread shutdown

Steffen created ticket #220

Steffen — Mon, 05 Feb 2018 14:20:41 -0000

Issue with handle randomization - getNextHandle()

Francis Theodore Catte posted a comment on ticket #219

Francis Theodore Catte — Fri, 12 Jan 2018 13:51:21 -0000

It looks like the NVRAM in this TPM is bad. I tried moving the key to index 2, and got a "Bad memory index error" instead. Same thing occurred at various other indexes. Using an identical laptop (same TPM version and everything) with this workflow worked flawlessly... Guess you can close this ticket.

Francis Theodore Catte posted a comment on ticket #219

Francis Theodore Catte — Thu, 11 Jan 2018 19:02:17 -0000

Okay, running the emulated TPM, I can read back the keyfile perfectly fine. So I ran the TPM proxy instead on a cleared TPM, and it fails. I've attached the resulting trace. For future reference , I got the TPM proxy running reliably like this in two terminals: sudo ./tpm_proxy --port 6543 --nodaemon --log ~/tpm_proxy.log --verbose --device /dev/tpm0 --persisttpm sudo tcsd -e -f Then ran my keyfile setup like normal in a third terminal. sudo -i tpm_takeownership -z tpm_nvdefine -i 0xffffffff -s 0...

Ken Goldman posted a comment on ticket #219

Ken Goldman — Thu, 11 Jan 2018 17:02:30 -0000

I'm not a trousers expert, but I do know the TPM well. I recommend debugging first with a software TPM (e.g, https://sourceforge.net/projects/ibmswtpm/. The trace should tell you what the TSS is doing and where the bug is. Feel free to send me the trace file if the error isn't obvious.

Francis Theodore Catte created ticket #219

Francis Theodore Catte — Thu, 11 Jan 2018 16:51:23 -0000

tpm_nvread - 'No space to load key'

Matthias Gerstner created merge request #2

Matthias Gerstner — Tue, 05 Dec 2017 10:57:56 -0000

OpenSSL 1.1 compatibility and autotools improvement

debora modified ticket #212

debora — Wed, 13 Sep 2017 22:43:34 -0000

Extra dot after NAME in Tspi_Context_Connect.3 man page

debora modified ticket #211

debora — Wed, 13 Sep 2017 22:41:46 -0000

libtspi assumes linux equals glibc

Laurent Bigonville created ticket #218

Laurent Bigonville — Sat, 26 Aug 2017 11:37:17 -0000

Shouldn't tpm_resetdalock support unicode?

Ken Goldman posted a comment on ticket #216

Ken Goldman — Tue, 08 Aug 2017 21:19:08 -0000

A bit off topic ... Dan Anderson: IBM has a TSS for TPM 2.0. If you would like to test it on Solaris, I'd be happy to fix any bugs you find. kgoldman@us.ibm.com

Dan Anderson created ticket #217

Dan Anderson — Tue, 08 Aug 2017 18:31:05 -0000

Fix compiler warnings in tcsd with inproper printf format

Dan Anderson created ticket #216

Dan Anderson — Tue, 08 Aug 2017 18:26:10 -0000

TDDL function open_device() fails if fd == 0

Dan Anderson created ticket #215

Dan Anderson — Tue, 08 Aug 2017 18:18:27 -0000

Core dump caused by misaligned pointer in tcs get_tpm_metrics()

Dan Anderson posted a comment on ticket #214

Dan Anderson — Tue, 08 Aug 2017 18:06:18 -0000

FYI, the downstream Oracle Solaris patch above is trousers/patches/include_tspps.h.patch

Dan Anderson created ticket #214

Dan Anderson — Tue, 08 Aug 2017 18:02:40 -0000

Header file tsp_delegate.h missing __spi_freeTable definition

Dan Anderson created ticket #213

Dan Anderson — Tue, 08 Aug 2017 17:55:09 -0000

Include Solaris with operating systems using const keyword to remove compiler warnings

Dan Anderson posted a comment on ticket #209

Dan Anderson — Tue, 08 Aug 2017 17:22:28 -0000

The above link is dead. It would be better, I think, to file individual bugs for each patch or each problem.

Dan Anderson created ticket #212

Dan Anderson — Tue, 08 Aug 2017 17:19:27 -0000

Extra dot after NAME in Tspi_Context_Connect.3 man page

Natanael Copa posted a comment on ticket #211

Natanael Copa — Tue, 13 Jun 2017 18:48:27 -0000

Better (untested) variant, without mutex, using getpwuid_r, which also deals with the situation that the euid does not exist: diff --git a/src/tspi/ps/tspps.c b/src/tspi/ps/tspps.c index b5e83d0..4874509 100644 --- a/src/tspi/ps/tspps.c +++ b/src/tspi/ps/tspps.c @@ -51,9 +51,6 @@ static int user_ps_fd = -1; static MUTEX_DECLARE_INIT(user_ps_lock); -#if (defined (__FreeBSD__) || defined (__OpenBSD__)) -static MUTEX_DECLARE_INIT(user_ps_path); -#endif static struct flock fl; @@ -66,9 +63,7 @@ get_user_ps_path(char...

Natanael Copa posted a comment on ticket #211

Natanael Copa — Tue, 13 Jun 2017 18:16:40 -0000

Something like: diff --git a/src/tspi/ps/tspps.c b/src/tspi/ps/tspps.c index b5e83d0..838522c 100644 --- a/src/tspi/ps/tspps.c +++ b/src/tspi/ps/tspps.c @@ -51,9 +51,7 @@ static int user_ps_fd = -1; static MUTEX_DECLARE_INIT(user_ps_lock); -#if (defined (__FreeBSD__) || defined (__OpenBSD__)) static MUTEX_DECLARE_INIT(user_ps_path); -#endif static struct flock fl; @@ -66,9 +64,6 @@ get_user_ps_path(char **file) TSS_RESULT result; char *file_name = NULL, *home_dir = NULL; struct passwd *pwp; -#if...

Natanael Copa posted a comment on ticket #211

Natanael Copa — Tue, 13 Jun 2017 18:14:35 -0000

Apparently getpwent_r is not re-entrant. From man page: The function getpwent_r() is not really reentrant since it shares the reading position in the stream with all other threads. http://man7.org/linux/man-pages/man3/getpwent_r.3.html#NOTES I think it might be wise to simply drop the #if (defined(__linux) .....) and #if (defined (__FreeBSD__) || ...) and always use the mutex and posix compatible getpwent.

deitch created ticket #211

deitch — Tue, 13 Jun 2017 15:12:53 -0000

libtspi assumes linux equals glibc

syed mahaboob created ticket #210

syed mahaboob — Wed, 07 Jun 2017 10:42:23 -0000

Trousers on Android -N

Laurent Bigonville created ticket #209

Laurent Bigonville — Sun, 14 May 2017 01:18:24 -0000

Please considere debian patches

Laurent Bigonville created ticket #208

Laurent Bigonville — Sun, 14 May 2017 01:15:46 -0000

tpm_version prints non-initialised memory

debora modified ticket #196

debora — Wed, 10 May 2017 22:39:43 -0000

tpm_nvdefine not ask passwords

debora posted a comment on ticket #199

debora — Wed, 10 May 2017 22:37:37 -0000

Was able to build on x86_64 with patch. Still need to test on other architectures.

Rojikku created ticket #207

Rojikku — Tue, 02 May 2017 04:41:24 -0000

Build failed in function readx509Cert

Max Resch posted a comment on ticket #44

Max Resch — Thu, 20 Apr 2017 18:59:36 -0000

After some feedback from colleagues, I revised my patch and removed the necesity to decide at compile time, if support for UNIX Socket is compiled, insted it is treated the same as INET and INET6 sockets, with an option in the configuration option, that allows it to be disabled

debora modified ticket #204

debora — Wed, 19 Apr 2017 22:03:41 -0000

obj_context: unlock mutex in err path (patch provided)

debora modified ticket #203

debora — Wed, 19 Apr 2017 22:02:48 -0000

Seg faults in Test Suite due to hard coded return codes

debora posted a comment on ticket #204

debora — Wed, 19 Apr 2017 21:51:44 -0000

Tested and merged patch into my 'dev' branch. Needs to be merged into master.

debora posted a comment on ticket #203

debora — Wed, 19 Apr 2017 21:50:28 -0000

Merged patch into my 'dev' branch. Needs to be merged into master.

Max Resch created ticket #44

Max Resch — Tue, 18 Apr 2017 22:39:39 -0000

[PATCH] TCSD unix socket

debora modified ticket #205

debora — Tue, 18 Apr 2017 22:16:02 -0000

tpm-tools - patches for OpenSSL 1.1

debora posted a comment on ticket #205

debora — Tue, 18 Apr 2017 22:15:23 -0000

Unfortunately we won't be able to merge these patches due to the following found in one of the patches: + * Getter functions for OpenSSL < 1.1 compatibility. Based on code from: + * https://wiki.openssl.org/index.php/1.1_API_Changes#Adding_forward-compatible_code_to_older_versions + * and therefore: + * Copyright OpenSSL 2016 + * Contents licensed under the terms of the OpenSSL license + * See http://www.openssl.org/source/license.html for details My understanding is that the OpenSSL license is not...

Adam S created ticket #206

Adam S — Thu, 13 Apr 2017 20:19:25 -0000

Problem with Binding/Unbinding

debora modified ticket #205

debora — Mon, 10 Apr 2017 22:51:19 -0000

tpm-tools - patches for OpenSSL 1.1

debora modified ticket #204

debora — Mon, 10 Apr 2017 22:50:50 -0000

obj_context: unlock mutex in err path (patch provided)

debora modified ticket #199

debora — Mon, 10 Apr 2017 22:50:13 -0000

[tpm-tools PATCH] autoconf inject unneeded -m64 to CFLAGS

debora posted a comment on ticket #205

debora — Mon, 10 Apr 2017 22:36:38 -0000

Patch contains the following: Getter functions for OpenSSL < 1.1 compatibility. Based...