Re: [tpm2] ESAPI StartAuthSession

Re: [tpm2] ESAPI StartAuthSession

[Fuchs, Andreas]

[-- Attachment #1: Type: text/plain, Size: 1704 bytes --]

The engine will use ESYS's auto-config of a tpm. Thus is searches in the following order:
- TABRMD via DBUS
- /dev/tpmrm0
- /dev/tpm0
- Simulator at localhost:2321

If non of those are found, it errors.
So if you do not have 1-3 available it will connect to the simulator.

After the 2.0 release of tpm2-tss, a feature will be added to choose the TPM via environment variable:
see https://github.com/tpm2-software/tpm2-tss/pull/1049

Cheers,
Andreas
________________________________
From: tpm2 [tpm2-bounces(a)lists.01.org] on behalf of Davide Rutigliano [davide.ruti(a)gmail.com]
Sent: Thursday, June 14, 2018 09:43
To: tpm2(a)lists.01.org
Subject: Re: [tpm2] ESAPI StartAuthSession

And another question, is it possible to use the engine with tpm simulator or it is implemented only with devices configuration?

If so, do you think could be a good enhancement to work with the software tpm also?

I think it's not a long work so maybe I can do that.

Regards, Davide

Il lun 30 apr 2018, 22:16 Davide Rutigliano <davide.ruti(a)gmail.com<mailto:davide.ruti(a)gmail.com>> ha scritto:
Hello everyone,

I'm in trouble with Esys_StartAuthSession because I receive continuously this error and I cannot understand why:

"""
ERROR:esys_iutil:esapi/esapi_util/esys_iutil.c:879:esys_GetResourceObject() Error: Esys handle does not exist (70018).
ERROR:esys:esapi/esapi/Esys_StartAuthSession.c:124:Esys_StartAuthSession() Error in async function ErrorCode (0x00070018)
TPM2_StartAuthSession failed with 0x70018
"""

I suppose I'm doing something wrong with session handles but I don't know what.

Could someone help me please?

Thanks in advance,

Davide Rutigliano.

[-- Attachment #2: attachment.html --]
[-- Type: text/html, Size: 3551 bytes --]

Re: [tpm2] ESAPI StartAuthSession

[Davide Rutigliano]

[-- Attachment #1: Type: text/plain, Size: 1015 bytes --]

And another question, is it possible to use the engine with tpm simulator
or it is implemented only with devices configuration?

If so, do you think could be a good enhancement to work with the software
tpm also?

I think it's not a long work so maybe I can do that.

Regards, Davide

Il lun 30 apr 2018, 22:16 Davide Rutigliano <davide.ruti(a)gmail.com> ha
scritto:

> Hello everyone,
>
> I'm in trouble with Esys_StartAuthSession because I receive continuously
> this error and I cannot understand why:
>
> """
> ERROR:esys_iutil:esapi/esapi_util/esys_iutil.c:879:esys_GetResourceObject()
> Error: Esys handle does not exist (70018).
> ERROR:esys:esapi/esapi/Esys_StartAuthSession.c:124:Esys_StartAuthSession()
> Error in async function ErrorCode (0x00070018)
> TPM2_StartAuthSession failed with 0x70018
> """
>
> I suppose I'm doing something wrong with session handles but I don't know
> what.
>
> Could someone help me please?
>
> Thanks in advance,
>
> Davide Rutigliano.
>

[-- Attachment #2: attachment.html --]
[-- Type: text/html, Size: 1955 bytes --]

Re: [tpm2] ESAPI StartAuthSession

[Fuchs, Andreas]

[-- Attachment #1: Type: text/plain, Size: 1544 bytes --]

Hi Davide,

you are correct, you are somewhere referencing a (ESYS_TR handle) that does not exist.
I guess code would be good, so we can help you...

A typical usage looks like this:
ESYS_TR sessiontr;
TPMT_SYM_DEF symmetric = { .algorithm = TPM2_ALG_NULL };
r = Esys_StartAuthSession(ectx, ESYS_TR_NONE, ESYS_TR_NONE, /* tpmKey, bind */
                                            ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, /* shandle 1-3 */
                                            NULL, /*nonceCaller */, TPM2_SE_HMAC, &symmetric, TPM2_ALG_SHA1,
                                            &sessiontr, NULL /* tpmNonce */);

If this does not work, please send us your code...

Cheers,
Andreas

________________________________
From: tpm2 [tpm2-bounces(a)lists.01.org] on behalf of Davide Rutigliano [davide.ruti(a)gmail.com]
Sent: Monday, April 30, 2018 22:16
To: tpm2(a)lists.01.org
Subject: [tpm2] ESAPI StartAuthSession

Hello everyone,

I'm in trouble with Esys_StartAuthSession because I receive continuously this error and I cannot understand why:

"""
ERROR:esys_iutil:esapi/esapi_util/esys_iutil.c:879:esys_GetResourceObject() Error: Esys handle does not exist (70018).
ERROR:esys:esapi/esapi/Esys_StartAuthSession.c:124:Esys_StartAuthSession() Error in async function ErrorCode (0x00070018)
TPM2_StartAuthSession failed with 0x70018
"""

I suppose I'm doing something wrong with session handles but I don't know what.

Could someone help me please?

Thanks in advance,

Davide Rutigliano.

[-- Attachment #2: attachment.html --]
[-- Type: text/html, Size: 3406 bytes --]

[tpm2] ESAPI StartAuthSession

[Davide Rutigliano]

[-- Attachment #1: Type: text/plain, Size: 595 bytes --]

Hello everyone,

I'm in trouble with Esys_StartAuthSession because I receive continuously
this error and I cannot understand why:

"""
ERROR:esys_iutil:esapi/esapi_util/esys_iutil.c:879:esys_GetResourceObject()
Error: Esys handle does not exist (70018).
ERROR:esys:esapi/esapi/Esys_StartAuthSession.c:124:Esys_StartAuthSession()
Error in async function ErrorCode (0x00070018)
TPM2_StartAuthSession failed with 0x70018
"""

I suppose I'm doing something wrong with session handles but I don't know
what.

Could someone help me please?

Thanks in advance,

Davide Rutigliano.

[-- Attachment #2: attachment.html --]
[-- Type: text/html, Size: 1218 bytes --]