Alberto Planas Dominguez
6c2c82ac92
- Update to version 0.2.0+git.1677002906.cf6c4f0: * Bump version to 0.2.0 * packit: Remove workaround for Fedora BZ#2158598 * ima-emulator: Implement graceful shutdown * Update tss-esapi in Cargo.toml * packit: Re-enable tests on Fedora Rawhide * Deprecate `with-zmq` and `legacy-python-actions` features OBS-URL: https://build.opensuse.org/request/show/1067123 OBS-URL: https://build.opensuse.org/package/show/security/rust-keylime?expand=0&rev=39
43 lines
1.7 KiB
Diff
43 lines
1.7 KiB
Diff
Index: rust-keylime-0.2.0+git.1677002906.cf6c4f0/keylime-agent.conf
|
|
===================================================================
|
|
--- rust-keylime-0.2.0+git.1677002906.cf6c4f0.orig/keylime-agent.conf
|
|
+++ rust-keylime-0.2.0+git.1677002906.cf6c4f0/keylime-agent.conf
|
|
@@ -19,13 +19,15 @@ version = "2.0"
|
|
# of 'SHA256(public EK in PEM format)'.
|
|
#
|
|
# To override, set KEYLIME_AGENT_UUID environment variable.
|
|
-uuid = "d432fbb3-d2f1-4a97-9ef7-75bd81c00000"
|
|
+# uuid = "d432fbb3-d2f1-4a97-9ef7-75bd81c00000"
|
|
+uuid = "generate"
|
|
|
|
# The binding IP address and port for the agent server
|
|
#
|
|
# To override ip, set KEYLIME_AGENT_IP environment variable.
|
|
# To override port, set KEYLIME_AGENT_PORT environment variable.
|
|
-ip = "127.0.0.1"
|
|
+# ip = "127.0.0.1"
|
|
+ip = "0.0.0.0"
|
|
port = 9002
|
|
|
|
# Address and port where the verifier and tenant can connect to reach the agent.
|
|
@@ -41,7 +43,8 @@ contact_port = 9002
|
|
# To override registrar_ip, set KEYLIME_AGENT_REGISTRAR_IP environment variable.
|
|
# To override registrar_port, set KEYLIME_AGENT_REGISTRAR_PORT environment
|
|
# variable.
|
|
-registrar_ip = "127.0.0.1"
|
|
+# registrar_ip = "127.0.0.1"
|
|
+registrar_ip = "<REMOTE_IP>"
|
|
registrar_port = 8890
|
|
|
|
# Enable mTLS communication between agent, verifier and tenant.
|
|
@@ -151,7 +154,8 @@ revocation_actions_dir = "/usr/libexec/k
|
|
# KEYLIME_AGENT_REVOCATION_NOTIFICATION_IP environment variable.
|
|
# To override revocation_notification_port, set
|
|
# KEYLIME_AGENT_REVOCATION_NOTIFICATION_PORT environment variable.
|
|
-revocation_notification_ip = "127.0.0.1"
|
|
+# revocation_notification_ip = "127.0.0.1"
|
|
+revocation_notification_ip = "<REMOTE_IP>"
|
|
revocation_notification_port = 8992
|
|
|
|
# The path to the certificate to verify revocation messages received from the
|