Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2025-07-02 01:46:53 -04:00
Code Issues Projects Releases Packages Wiki Activity

attetstation: enable Azure TDX CRL checking (#3160)

Browse source 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
This commit is contained in:
Daniel Weiße 2024-06-12 08:02:47 +02:00 • committed by GitHub
parent c682558940
commit 8b76dd68ca
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 4 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

9
internal/attestation/azure/tdx/validator.go
View file

@ -93,11 +93,10 @@ func (v *Validator) validateQuote(tdxQuote *tdx.QuoteV4) error {
roots.AddCert((*x509.Certificate)(&v.cfg.IntelRootKey)) roots.AddCert((*x509.Certificate)(&v.cfg.IntelRootKey))
if err := verify.TdxQuote(tdxQuote, &verify.Options{ if err := verify.TdxQuote(tdxQuote, &verify.Options{
// TODO: Re-enable CRL checking once issues on Azure's side are resolved. CheckRevocations: true,
// CheckRevocations: true, GetCollateral: true,
// GetCollateral: true, TrustedRoots: roots,
TrustedRoots: roots, Getter: v.getter,
Getter: v.getter,
}); err != nil { }); err != nil {
return err return err
} }