From 8b76dd68caebf4e86f8f4684278485490e0bcb36 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Daniel=20Wei=C3=9Fe?= <66256922+daniel-weisse@users.noreply.github.com> Date: Wed, 12 Jun 2024 08:02:47 +0200 Subject: [PATCH] attetstation: enable Azure TDX CRL checking (#3160) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Daniel Weiße --- internal/attestation/azure/tdx/validator.go | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/internal/attestation/azure/tdx/validator.go b/internal/attestation/azure/tdx/validator.go index da8dc0eee..5b090dae9 100644 --- a/internal/attestation/azure/tdx/validator.go +++ b/internal/attestation/azure/tdx/validator.go @@ -93,11 +93,10 @@ func (v *Validator) validateQuote(tdxQuote *tdx.QuoteV4) error { roots.AddCert((*x509.Certificate)(&v.cfg.IntelRootKey)) if err := verify.TdxQuote(tdxQuote, &verify.Options{ - // TODO: Re-enable CRL checking once issues on Azure's side are resolved. - // CheckRevocations: true, - // GetCollateral: true, - TrustedRoots: roots, - Getter: v.getter, + CheckRevocations: true, + GetCollateral: true, + TrustedRoots: roots, + Getter: v.getter, }); err != nil { return err }