Index: rust-keylime-0.1.0+git.1663769444.6318234/keylime-agent.conf =================================================================== --- rust-keylime-0.1.0+git.1663769444.6318234.orig/keylime-agent.conf +++ rust-keylime-0.1.0+git.1663769444.6318234/keylime-agent.conf @@ -10,10 +10,12 @@ version = "2.0" # If you set this to "generate", Keylime will create a random UUID. # If you set this to "hash_ek", Keylime will set the UUID to the result # of 'SHA256(public EK in PEM format)'. -uuid = "d432fbb3-d2f1-4a97-9ef7-75bd81c00000" +# uuid = "d432fbb3-d2f1-4a97-9ef7-75bd81c00000" +uuid = "generate" # The binding address and port for the agent server -ip = "127.0.0.1" +# ip = "127.0.0.1" +ip = "0.0.0.0" port = 9002 # Address and port where the verifier and tenant can connect to reach the agent. @@ -22,7 +24,8 @@ contact_ip = "127.0.0.1" contact_port = 9002 # The address and port of registrar server which agent communicate with -registrar_ip = "127.0.0.1" +# registrar_ip = "127.0.0.1" +registrar_ip = "" registrar_port = 8890 # Enable mTLS communication between agent, verifier and tenant. @@ -96,7 +99,8 @@ revocation_actions_dir = "/usr/libexec/k # Revocation IP & Port used by the agent to receive revocation # notifications from the verifier via zeromq. # This is optional and used only when 'enable_revocation_notifications' is 'true'. -revocation_notification_ip = "127.0.0.1" +# revocation_notification_ip = "127.0.0.1" +revocation_notification_ip = "" revocation_notification_port = 8992 # The path to the certificate to verify revocation messages received from the