TPM2.0 failed replay of PCR0 during boot attestation - tpm

I'm trying to do boot attestation over a couple of devices and I get that the replay of the PCR0 against the eventlog failed. Is there a way to debug where the issue is?

Related

Detect bluetooth FW hang in bluez stack

I am trying to implement an application using bluez.
The issue is :
If sometimes the Bluetooth controller Firmware goes into bad state, my application hangs.
There is no way to recover, except through a power reset.
The solution I can think of is implementing a timer after sending the hci command to the controller.
Is there any preferred way to do it in bluez user space?
Or does this have to be handled at the application layer only?

Is it possible to "authorize service" using pybluez?

If I pair a bluetooth device to my PC but I don't trust it, any time I power on the bluetooth device I will get a prompt like this in bluetoothctl:
Authorize service
[agent] Authorize service 0000111f-0000-1000-8000-00805f9b34fb (yes/no):
If I type yes, the device is allowed to connect.
I would like to write a small Python script that watches for new services and prompts me to authorize them using inotify-send, and pybluez seems like the tool for the job. However, after reading the documentation, I can't figure out if this is even possible. (Probably in large part because I'm not familiar with technical Bluetooth terminology.)
Is it possible to watch for- and authorize services using pybluez, and if so, how?

Just Works pairing with BlueZ

I'm trying to pair from a Linux host (ARM based, Angstrom distribution) to a MCU driven embedded device using BLE Just Works Secure Connection. As a device I'm currently using an ESP32 dev kit flashed with the GATT security example. However, so far my tries weren't successful and I failed to find the according documentation, either.
I managed to pair my Android smartphone with the device, so pairing on the device side, in general, seems to work. I also tried to conduct the pairing without a Secure Connection (setting Authorization Request to SP_LE_AUTH_BOND) which worked with bluetoothctl or btmgmt.
I'm grateful for any documentation pointer how to perform pairing from the command line, Python scripting or any C/C++ code.
Have a look at the answer below and the included references; these cover pairing using BlueZ/Linux:-
Raspberry Pi BLE Encryption/Pairing
If this still doesn't work, please launch "btmon" on another terminal before starting the pairing process as that will give you an indication as to what is going wrong.
I hope this helps.

Enabling static pin for bluetooth authentication BlueZ (Linux) error in bt-agent

I am trying to enable a static pin/password authentication entry for devices that are trying to connect to my raspberry pi. I have tried various methods including using bt-agent tools, while configuring sspmode to 0 using hciconfig. bt-agent tool sometimes works, but often times results in seg faults. Are there any better alternatives to enable a static pin on my bluetooth connection?
I have done some further debugging with bt-agent tool. The bt-agent tool is able to correctly verify the password. The device is able to connect for a fraction of a second, but then error pops up in client device saying incorrect pin. Upon further debugging, I found in /var/log/syslog the following error pertaining to DBUS that happens exactly at pairing time: Agent /org/blueztools replied with an error: org.freedesktop.DBus.Error.NoReply, Message did not receive a reply (timeout by message bus).
FYI, I am using a Raspberry Pi.

UWP Bluetooth​LEAdvertisement​Watcher periodically gets in Aborted state

My UWP C# application is by essence a headless one running in Win 10 IoT (current Insiders Preview build 10.0.17035.1000) on Raspberry Pi 3 SBC. Part of its functionality is to communicate with BLE devices. It is pretty stable but there are some UWP BLE communication problems I encounter. The most important one for now is that UWP Bluetooth​LEAdvertisement​Watcher, after started and stopped multiple times, periodically gets in Aborted state on a Start command. The solution I currently use to recover from a pending Aborted state is to restart the device using ShutdownManager.BeginShutdown() method. Can you, please, advise me if there is a more elegant solution to recover the Bluetooth​LEAdvertisement​Watcher to Started state.

Resources