3 commits

Author	SHA1	Message	Date
Otto Bittner	4adc19b7f5	AB#2350: Configurably enforce idkeydigest on Azure ... * Add join-config entry for "enforceIdKeyDigest" bool * Add join-config entry for "idkeydigest" * Initially filled with TPM value from bootstrapper * Add config entries for idkeydigest and enforceIdKeyDigest * Extend azure attestation validator to check idkeydigest, if configured. * Update unittests * Add logger to NewValidator for all CSPs * Add csp to Updateable type Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com> Co-authored-by: Daniel Weiße <dw@edgeless.systems>	2022-08-31 15:26:04 +02:00
Otto Bittner	7c5556864b	AB#2333: Add AMD SNP-based attestation ... Currently only available on Azure CVMs. * Get the public attestation key from the TPM. * Get the snp report from the TPM. * Get the VCEK and ASK certificate from the metadata api. * Verify VCEK using hardcoded root key (ARK) * Verify SNP report using VCEK * Verify HCLAkPub using SNP report by comparing AK with runtimeData * Extend unittest Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com> Co-authored-by: Daniel Weiße <dw@edgeless.systems>	2022-08-29 16:29:33 +02:00
Daniel Weiße	3467df6b69	Move attestation, atls and oid packages to internal directory ... Signed-off-by: Daniel Weiße <dw@edgeless.systems>	2022-06-08 17:17:06 +02:00

Renamed from coordinator/attestation/azure/validator_test.go (Browse further)