Skip to content

v1.6.0

Latest
Compare
Choose a tag to compare
@daniel-weisse daniel-weisse released this 30 Oct 12:05
· 15 commits to master since this release
cc85154

What's Changed

Additions

  • Log TCB advisories if status is not UpToDate by @thomasten in #729
  • Allow specifying accepted avisories for SWHardeningNeeded TCB status by @daniel-weisse in #733
  • Let Coordinator serve monotonic counters to Marbles by @thomasten in #741
  • Derive marble private secrets using marble type in addition to UUID by @daniel-weisse in #730
    • Previously, secrets were only derived based on a Marble's UUID, which would provide two different Marbles reporting the same UUID with the same secret. This release enforces two different Marbles will always receive different secrets, regardless of their UUID. If two Marbles require access to the same secret, the secret should be marked as Shared instead. To restore the behavior of MarbleRun previous to v1.6, set the DisableSecretBinding property of the Marble in the manifest to true.

Fixes

  • coordinator: fix failing user verification when multiple client certs are provided by @thomasten in #738

Misc

Full Changelog: v1.5.2...v1.6.0