Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2025-02-18 13:54:23 -05:00
Code Issues Packages Projects Releases Wiki Activity

DO NOT MERGE! attestation: use ark from THIM

Browse Source 
remove this commit eventually.
This commit is contained in:
Otto Bittner 2024-04-09 17:34:40 +02:00 committed by Malte Poll
parent 6fa51f73d8
commit 1e7d21e071
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
internal/attestation/azure/snp/validator.go
View File

@ -122,6 +122,11 @@ func (v *Validator) getTrustedKey(ctx context.Context, attDoc vtpm.AttestationDo
return nil, fmt.Errorf("parsing ASK certificate: %w", err)
}
ark, err := x509.ParseCertificate(att.CertificateChain.ArkCert)
if err != nil {
return nil, fmt.Errorf("parsing ARK certificate: %w", err)
}
verifyOpts := &verify.Options{
TrustedRoots: map[string][]*trust.AMDRootCerts{
"Genoa": {
@ -129,7 +134,7 @@ func (v *Validator) getTrustedKey(ctx context.Context, attDoc vtpm.AttestationDo
Product: "Genoa",
ProductCerts: &trust.ProductCerts{
Ask: ask,
Ark: trustedArk,
Ark: ark,
},
},
},