trustedjava-support

[Trustedjava-support] Another problem when running tests

[Carolin L. <car...@un...>]

Hi,

I installed sun java 1.5 which solved my previous problem, but now, I
have another one:

diufpc266 jTssWrapperPBuilt_0.2.2 # make run_tests
LD_LIBRARY_PATH=output/lib
CLASSPATH=output/jars/internal_jtss_wrapper.jar:outpu
t/jars/iaik_jtss_wrapper.jar:output/jars/iaik_jtss_wrapper_test.jar:/usr/share/j
unit/lib/junit.jar  java iaik.tss.test.junit.TestMain
.9:04:56:259 [INFO] TestTakeOwnership::testTakeOwnership (70):  TPM
ownership al
ready taken
...................9:04:58:100 [INFO] TestTpm::testCreateEK (104):     
createEn
dorsementKey command is disabled
....9:04:58:294 [INFO] TestTpm::testCertifySelfTest (284):     
TPM_ORD_CertifyS
elfTest is not supported by this TPM
.................
.....TSPI call error:
  error code:    0x1
  error message: TPM layer: Authentication failed
        at
iaik.tss.impl.jni.TcBaseObject.handleRetCode(TcBaseObject.java:98)
        at iaik.tss.impl.jni.TcRsaKey.certifyKey(TcRsaKey.java:234)
        at
iaik.tss.test.junit.TestKeys.testCertifyKeyWithoutNonce(TestKeys.java
:460)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39)
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at junit.framework.TestCase.runTest(TestCase.java:154)
        at junit.framework.TestCase.runBare(TestCase.java:127)
        at junit.framework.TestResult$1.protect(TestResult.java:106)
        at junit.framework.TestResult.runProtected(TestResult.java:124)
        at junit.framework.TestResult.run(TestResult.java:109)
        at junit.framework.TestCase.run(TestCase.java:118)
        at junit.framework.TestSuite.runTest(TestSuite.java:208)
        at junit.framework.TestSuite.run(TestSuite.java:203)
        at junit.framework.TestSuite.runTest(TestSuite.java:208)
        at junit.framework.TestSuite.run(TestSuite.java:203)
        at junit.textui.TestRunner.doRun(TestRunner.java:116)
        at junit.textui.TestRunner.doRun(TestRunner.java:109)
        at junit.textui.TestRunner.run(TestRunner.java:72)
        at iaik.tss.test.junit.TestMain.allTests(TestMain.java:46)
        at iaik.tss.test.junit.TestMain.main(TestMain.java:71)
F.....
Time: 34.878
There was 1 failure:
1)
testCertifyKeyWithoutNonce(iaik.tss.test.junit.TestKeys)junit.framework.AssertionFailedError:
certify key (without nonce) failed
        at
iaik.tss.test.junit.TestKeys.testCertifyKeyWithoutNonce(TestKeys.java:463)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at iaik.tss.test.junit.TestMain.allTests(TestMain.java:46)
        at iaik.tss.test.junit.TestMain.main(TestMain.java:71)

FAILURES!!!
Tests run: 51,  Failures: 1,  Errors: 0

I run it as root with TPM emulator version 0.4 and trousers version 0.2.7.

Furthermore I do no understand, why jTss says, that the ownership has
been already taken when I start the emulator with the "startup=clear"
option...I think this should not happen...

Bye
Carolin

Re: [Trustedjava-support] Another problem when running tests

[Carolin L. <car...@un...>]

Hi,

when I first clear the owner, using the clearOwner method of the TcITpm
class, a new owner can be set. But where does the wrapper store the
information whether a TPM has already been owned or not? I think, there
has to be a file on my HD. I thought, it has to be in the system.data
file in /var/tpm/, but deleting this file and reloading the module does
not help...

regards
Carolin



Carolin Latze wrote:
> Hi,
>
> I installed sun java 1.5 which solved my previous problem, but now, I
> have another one:
>
> diufpc266 jTssWrapperPBuilt_0.2.2 # make run_tests
> LD_LIBRARY_PATH=output/lib
> CLASSPATH=output/jars/internal_jtss_wrapper.jar:outpu
> t/jars/iaik_jtss_wrapper.jar:output/jars/iaik_jtss_wrapper_test.jar:/usr/share/j
> unit/lib/junit.jar  java iaik.tss.test.junit.TestMain
> .9:04:56:259 [INFO] TestTakeOwnership::testTakeOwnership (70):  TPM
> ownership al
> ready taken
> ...................9:04:58:100 [INFO] TestTpm::testCreateEK (104):     
> createEn
> dorsementKey command is disabled
> ....9:04:58:294 [INFO] TestTpm::testCertifySelfTest (284):     
> TPM_ORD_CertifyS
> elfTest is not supported by this TPM
> .................
> .....TSPI call error:
>   error code:    0x1
>   error message: TPM layer: Authentication failed
>         at
> iaik.tss.impl.jni.TcBaseObject.handleRetCode(TcBaseObject.java:98)
>         at iaik.tss.impl.jni.TcRsaKey.certifyKey(TcRsaKey.java:234)
>         at
> iaik.tss.test.junit.TestKeys.testCertifyKeyWithoutNonce(TestKeys.java
> :460)
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
> java:39)
>         at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
> sorImpl.java:25)
>         at java.lang.reflect.Method.invoke(Method.java:585)
>         at junit.framework.TestCase.runTest(TestCase.java:154)
>         at junit.framework.TestCase.runBare(TestCase.java:127)
>         at junit.framework.TestResult$1.protect(TestResult.java:106)
>         at junit.framework.TestResult.runProtected(TestResult.java:124)
>         at junit.framework.TestResult.run(TestResult.java:109)
>         at junit.framework.TestCase.run(TestCase.java:118)
>         at junit.framework.TestSuite.runTest(TestSuite.java:208)
>         at junit.framework.TestSuite.run(TestSuite.java:203)
>         at junit.framework.TestSuite.runTest(TestSuite.java:208)
>         at junit.framework.TestSuite.run(TestSuite.java:203)
>         at junit.textui.TestRunner.doRun(TestRunner.java:116)
>         at junit.textui.TestRunner.doRun(TestRunner.java:109)
>         at junit.textui.TestRunner.run(TestRunner.java:72)
>         at iaik.tss.test.junit.TestMain.allTests(TestMain.java:46)
>         at iaik.tss.test.junit.TestMain.main(TestMain.java:71)
> F.....
> Time: 34.878
> There was 1 failure:
> 1)
> testCertifyKeyWithoutNonce(iaik.tss.test.junit.TestKeys)junit.framework.AssertionFailedError:
> certify key (without nonce) failed
>         at
> iaik.tss.test.junit.TestKeys.testCertifyKeyWithoutNonce(TestKeys.java:463)
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>         at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>         at iaik.tss.test.junit.TestMain.allTests(TestMain.java:46)
>         at iaik.tss.test.junit.TestMain.main(TestMain.java:71)
>
> FAILURES!!!
> Tests run: 51,  Failures: 1,  Errors: 0
>
> I run it as root with TPM emulator version 0.4 and trousers version 0.2.7.
>
> Furthermore I do no understand, why jTss says, that the ownership has
> been already taken when I start the emulator with the "startup=clear"
> option...I think this should not happen...
>
> Bye
> Carolin
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Trustedjava-support mailing list
> Tru...@li...
> https://lists.sourceforge.net/lists/listinfo/trustedjava-support
>   

Re: [Trustedjava-support] Another problem when running tests

[Thomas W. <tho...@ia...>]

Hi Carolin,

> when I first clear the owner, using the clearOwner method of the TcITpm
> class, a new owner can be set. But where does the wrapper store the
> information whether a TPM has already been owned or not? I think, there
> has to be a file on my HD. I thought, it has to be in the system.data
> file in /var/tpm/, but deleting this file and reloading the module does
> not help...

Nor the wrapper nor the TSS stores if the TPM is already owned. The TPM
itself knows if ownership is already taken or not. The file
/usr/local/var/lib/tpm/system.data is the persistent system storage of
the TrouSerS TSS.
If you are using TPM emulator, there is another file representing the
internal state of the TPM. It's default location is /var/tpm. The file
name starts with tpm_emulator (the exact name depends on the version of
the emulator you are using). Note that this file might not exist until
you unload the emulator module. Upon unloading the emulator writes it's
internal state to this file.
So - if you want to start with a clean setup: Unload the emulator, make
sure /var/tpm is empty and also delete the system.data file of TrouSerS
(note that there also might be a ~/.trousers/user.data file from
TrouSerS 0.2.7 onwards). Then load them emulator and start TrouSerS.

The "Authentication failed" message you mentioned in your last mail is a
known issue but the reasons for it are currently unclear. This seems to
occur if the TSS/TPM is put under stress (i.e. it occasionally happens
if you are running sequences with many TPM operations but it does not
happen when executing them one by one). The problem has been reported to
Kent Yoder (TrouSerS maintainer) and was confirmed by him. A solution is
currently not known.
I personally do not think that it is a problem of the jTSS wrapper
because one can also trigger this behaviour when using TrouSerS with
plain C test programs.

Regards,
Thomas Winkler
IAIK, TU Graz, Austria

Re: [Trustedjava-support] Another problem when running tests

[Carolin L. <car...@un...>]

Hi Thomas,

thanks for the hint on how to use a clean setup. You were right. Now, I
am able to reproduce the problem using my C program. Perhaps it has to
do with the new version of the TPM emulator (I used version 0.3 before
installing jTSS).

Bye
Carolin

Thomas Winkler wrote:
> Hi Carolin,
>
>   
>> when I first clear the owner, using the clearOwner method of the TcITpm
>> class, a new owner can be set. But where does the wrapper store the
>> information whether a TPM has already been owned or not? I think, there
>> has to be a file on my HD. I thought, it has to be in the system.data
>> file in /var/tpm/, but deleting this file and reloading the module does
>> not help...
>>     
>
> Nor the wrapper nor the TSS stores if the TPM is already owned. The TPM
> itself knows if ownership is already taken or not. The file
> /usr/local/var/lib/tpm/system.data is the persistent system storage of
> the TrouSerS TSS.
> If you are using TPM emulator, there is another file representing the
> internal state of the TPM. It's default location is /var/tpm. The file
> name starts with tpm_emulator (the exact name depends on the version of
> the emulator you are using). Note that this file might not exist until
> you unload the emulator module. Upon unloading the emulator writes it's
> internal state to this file.
> So - if you want to start with a clean setup: Unload the emulator, make
> sure /var/tpm is empty and also delete the system.data file of TrouSerS
> (note that there also might be a ~/.trousers/user.data file from
> TrouSerS 0.2.7 onwards). Then load them emulator and start TrouSerS.
>
> The "Authentication failed" message you mentioned in your last mail is a
> known issue but the reasons for it are currently unclear. This seems to
> occur if the TSS/TPM is put under stress (i.e. it occasionally happens
> if you are running sequences with many TPM operations but it does not
> happen when executing them one by one). The problem has been reported to
> Kent Yoder (TrouSerS maintainer) and was confirmed by him. A solution is
> currently not known.
> I personally do not think that it is a problem of the jTSS wrapper
> because one can also trigger this behaviour when using TrouSerS with
> plain C test programs.
>
> Regards,
> Thomas Winkler
> IAIK, TU Graz, Austria
>
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Trustedjava-support mailing list
> Tru...@li...
> https://lists.sourceforge.net/lists/listinfo/trustedjava-support
>