search

confidential-containers / trustee

Attestation and Secret Delivery Components
Apache License 2.0
68 stars 89 forks source link

verifier/snp: check for attestation report version causing verifier to fail #589

Closed AdithyaKrishnan closed 4 days ago

AdithyaKrishnan commented 1 week ago

The check for the attestation report version is causing an error in the verifier due to a recent update changing the version and structure of the attestation report. A stakeholder from the confidential community brought up this concern. 

ERROR kbs::http::error] Attestation failed: Verifier evaluate failed: Unexpected report version

There are 2 proposals to fix this issue:

  1. Skip the check for the report version
  2. Change the check from report.version != 2 to report.version != 3 or report.version >= 2
AdithyaKrishnan commented 4 days ago

Fixed by Trustee PR#590