Skip to content

Unit tests don't test non-debug attestation validation #73

@rjzak

Description

@rjzak

When debug mode is disabled, such when the certificate isn't self-signed, SGX and SNP have additional checks. Both add an additional check there the hash of the public key from the Certificate Request is expected to be in the body of the attestation report. Additionally, the stored test data for SGX & SNP have bogus data in the respective fields:

  • SGX: report.reportdata = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
  • SNP: report.body.report_data = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f

We'll need the saved public key data, and new saved attestation reports for unit tests to pass when not in debug mode.

Metadata

Metadata

Assignees

No one assigned

    Labels

    attestationIssues related to attestation

    Type

    No type

    Projects

    Status

    New

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions