Re: [Qemu-devel] [PATCH V8 14/14] Allow to provide inital TPM state

2011-09-07 Thread Michael S. Tsirkin
On Wed, Sep 07, 2011 at 09:51:00AM -0400, Stefan Berger wrote: > On 09/07/2011 07:23 AM, Michael S. Tsirkin wrote: > >On Tue, Sep 06, 2011 at 10:45:34PM -0400, Stefan Berger wrote: > >>On 09/04/2011 12:38 PM, Michael S. Tsirkin wrote: > >>>On Thu, Sep 01, 2011 at 11:00:56PM -0400, Stefan Berger wro

Re: [Qemu-devel] [PATCH V8 14/14] Allow to provide inital TPM state

2011-09-07 Thread Stefan Berger
On 09/07/2011 07:23 AM, Michael S. Tsirkin wrote: On Tue, Sep 06, 2011 at 10:45:34PM -0400, Stefan Berger wrote: On 09/04/2011 12:38 PM, Michael S. Tsirkin wrote: On Thu, Sep 01, 2011 at 11:00:56PM -0400, Stefan Berger wrote: initstate_fd= initstate_base64=on/off (or base64/bin if you really e

Re: [Qemu-devel] [PATCH V8 14/14] Allow to provide inital TPM state

2011-09-07 Thread Michael S. Tsirkin
On Tue, Sep 06, 2011 at 10:45:34PM -0400, Stefan Berger wrote: > On 09/04/2011 12:38 PM, Michael S. Tsirkin wrote: > >On Thu, Sep 01, 2011 at 11:00:56PM -0400, Stefan Berger wrote: > > > >initstate_fd= > >initstate_base64=on/off (or base64/bin if you really expect > > more formats in the future

Re: [Qemu-devel] [PATCH V8 14/14] Allow to provide inital TPM state

2011-09-06 Thread Stefan Berger
On 09/04/2011 12:38 PM, Michael S. Tsirkin wrote: On Thu, Sep 01, 2011 at 11:00:56PM -0400, Stefan Berger wrote: initstate_fd= initstate_base64=on/off (or base64/bin if you really expect more formats in the future) and use qemu routines to get the fd so they can be passed through the mo

Re: [Qemu-devel] [PATCH V8 14/14] Allow to provide inital TPM state

2011-09-04 Thread Michael S. Tsirkin
On Thu, Sep 01, 2011 at 11:00:56PM -0400, Stefan Berger wrote: > >Do we really have to hand-craft file reading? > >How large is TPMPROP_TPM_MAX_NV_SPACE? > >If not too large, we can just allocate that > >and do a single fread call? > Yes, I could do that, too. > >Or, we rely on glib now - can we us

Re: [Qemu-devel] [PATCH V8 14/14] Allow to provide inital TPM state

2011-09-01 Thread Stefan Berger
On 09/01/2011 02:10 PM, Michael S. Tsirkin wrote: On Wed, Aug 31, 2011 at 10:36:05AM -0400, Stefan Berger wrote: This patch adds a -tpm ...,initstate=...,... command line option to the TPM's existing options and enables the TPM to be initialized with an existing state blob. This in turn allows u

Re: [Qemu-devel] [PATCH V8 14/14] Allow to provide inital TPM state

2011-09-01 Thread Michael S. Tsirkin
On Thu, Sep 01, 2011 at 09:10:24PM +0300, Michael S. Tsirkin wrote: > Do we really have to hand-craft file reading? > How large is TPMPROP_TPM_MAX_NV_SPACE? > If not too large, we can just allocate that > and do a single fread call? > > Or, we rely on glib now - can we use > g_io_channel_read_to_

Re: [Qemu-devel] [PATCH V8 14/14] Allow to provide inital TPM state

2011-09-01 Thread Michael S. Tsirkin
On Wed, Aug 31, 2011 at 10:36:05AM -0400, Stefan Berger wrote: > This patch adds a -tpm ...,initstate=...,... command line option to the > TPM's existing options and enables the TPM to be initialized with an > existing state blob. This in turn allows us to simulate TPM manufacturing > and equip the

[Qemu-devel] [PATCH V8 14/14] Allow to provide inital TPM state

2011-08-31 Thread Stefan Berger
This patch adds a -tpm ...,initstate=...,... command line option to the TPM's existing options and enables the TPM to be initialized with an existing state blob. This in turn allows us to simulate TPM manufacturing and equip the TPM with an endorsement key, certificates and initialize its NVRAM are