attestation: add SNP-based attestation for aws-sev-snp (#1916)

Browse source

* config: move AMD root key to global constant
* attestation: add SNP based attestation for aws
* Always enable SNP, regardless of attestation type.
* Make AWSNitroTPM default again

There exists a bug in AWS SNP implementation where sometimes
a host might not be able to produce valid SNP reports.
Since we have to wait for AWS to fix this we are merging SNP
attestation as opt-in feature.

...

This commit is contained in:

Otto Bittner 2023-06-21 14:19:55 +02:00 • committed by GitHub

parent 94b21e11ad

commit c7d12055d1

No known key found for this signature in database

GPG key ID: 4AEE18F83AFDEB23

23 changed files with 646 additions and 239 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

43

internal/attestation/vtpm/attestation_test.go

View file

File diff suppressed because one or more lines are too long