Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2024-12-23 22:49:43 -05:00
Code Issues Packages Projects Releases Wiki Activity

attetstation: enable Azure TDX CRL checking (#3160)

Browse Source 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
This commit is contained in:
Daniel Weiße 2024-06-12 08:02:47 +02:00 committed by GitHub
parent c682558940
commit 8b76dd68ca
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
internal/attestation/azure/tdx/validator.go
View File

@ -93,11 +93,10 @@ func (v *Validator) validateQuote(tdxQuote *tdx.QuoteV4) error {
roots.AddCert((*x509.Certificate)(&v.cfg.IntelRootKey))
if err := verify.TdxQuote(tdxQuote, &verify.Options{
// TODO: Re-enable CRL checking once issues on Azure's side are resolved.
// CheckRevocations: true,
// GetCollateral: true,
TrustedRoots: roots,
Getter: v.getter,
CheckRevocations: true,
GetCollateral: true,
TrustedRoots: roots,
Getter: v.getter,
}); err != nil {
return err
}