domain_service

func GenerateProgramCert ¶

func GenerateProgramCert(domain *tao.Domain, serialNumber int, programPrin *auth.Prin,
	verifier *tao.Verifier, now, expiry time.Time) (*x509.Certificate, error)

This function generates a Program Certificate. In particular, it generates an attestation signed by the domain policy key, with a statement of the form 'policyKey says programCert speaksFor program' where programCert is a X509 cert signed by the policy key with subject CommonName being the Tao name of the program and subject public key being programKey. Certificate expiration time is one year from issuing time.

func InitAcls ¶

func InitAcls(domain *tao.Domain, trustedEntitiesPath string) error

This function reads in trusted entities from a file at trustedEntitiesPath. In particular, this file contains the text representation of a trusted_entities proto message, which contains the Tao names of trusted programs and hosts, information about trusted machines and trusted machine certificates. For each such trusted entity, this function adds ACL rules to the domain guard, and saves the changes before returning.

func RequestCrl ¶

func RequestCrl(network, addr string) (*pkix.CertificateList, error)

This function sends a DomainServiceRequest of the type GET_CRL to the domain service, and deserializes the response into a pkix.CertificateList containing the revoked certificates.

func RequestProgramCert ¶

func RequestProgramCert(hostAtt *tao.Attestation, verifier *tao.Verifier,
	network string, addr string) (*x509.Certificate, error)

This function packages a host attestation into a DomainServiceRequest of the type DOMAIN_CERT_REQUEST, sends it to the domain service and deserializes the response into an attestation that contains the domain program certificate.

func RequestRevokeCertificate ¶

func RequestRevokeCertificate(att *tao.Attestation, network, addr string) error

This function packages a certificate revoke request into a DomainServiceRequest of type REVOKE_CERTIFICATE and sends it to the domain service. It expects att to be an attestation signed by the domain policy key with a statement of the form: policyKey says revoke certificateSerialNumber

func RevokeCertificate ¶

func RevokeCertificate(serAtt []byte, revokedCerts []pkix.RevokedCertificate,
	domain *tao.Domain) ([]pkix.RevokedCertificate, error)

This function helps process a certificate revocation request. It expects serAtt to be a serialized attestation signed by the domain policy key, with a statement of the form: policyKey says revoke certificateSerialNumber This function gets a list of revoked certificates, updates it if the cert revocation request is valid, and returns the updated list.

func VerifyAttestation ¶

func VerifyAttestation(serializedHostAttestation []byte, domain *tao.Domain) (*auth.Prin,
	*auth.Prin, *auth.Prin, error)

func VerifyHostAttestation ¶

func VerifyHostAttestation(serializedHostAttestation []byte, domain *tao.Domain,
	rootCerts *x509.CertPool) (*auth.Prin, *auth.Prin, *auth.Prin, error)

This function makes the following checks (1) Checks if the attestation signature is valid and the statement is of the form

'Speaker says Key speaks for Program'.

(2) Checks that 'Program' in the above statement is allowed to Execute in the domain policy.

In particular, the policy should allow the predicate:
Authorized(ProgramTaoName, "Execute")

(3) Checks that 'Speaker' in the above statement is a key principal endorsed by the policy key,

or rootCerts, via an endorsement chain. Each endorsement in this chain endorses the key
signing the previous endorsement (starting with the 'Speaker' key).

An endorsement endorses either a host key, in which case it is an attestation,
or the root hardware key, in which case it is certificate.
This function also checks that each host or root hardware encoutered along this endorsement
chain is allowed as per domain policy. In particular the policy should allow the predicates
Authorized(HostTaoName, "Host") and Authorized(EncodedMachineInformation, "Root")

A valid attestation chain must either end in a attestation signed by the policy key
or a certificate signed by one of the rootCerts.

If all above checks go through, the function returns the principals: Speaker, Key, Program.