4 Commits

Author	SHA1	Message	Date
Otto Bittner	84d8bd8110	verify: query vlek ASK from KDS if not set ... The user can choose to supply an intermediate certificate through the config, like they can for the root key. If none is supplied, the KDS is queried for a valid ASK.	2023-11-24 15:49:48 +01:00
Otto Bittner	cdc91b50bc	verify: move CSP-specific code to internal/verify ... With the introduction of SNP-based attestation on AWS some of the information in the report (MAAToken) is not applicable to all attestation reports anymore. Thus, make verify cmd CSP-agnostic and move CSP-specific logic to internal/verify. Also make internal/attestation/snp CSP aware.	2023-11-24 15:49:48 +01:00
Adrian Stobbe	5819a11d25	api: for Azure attestationconfigapi use TCB values from SNP report instead of MAA token (#2429)	2023-10-17 17:36:50 +02:00
Adrian Stobbe	fdd47b7a00	cli: new flag for Azure JSON output of constellation verify (#2391)	2023-10-07 16:24:29 +02:00