enarx-archive / sev

Library for AMD SEV
Apache License 2.0
20 stars 15 forks source link

Remove just-in-time certificate signing #60

Closed connorkuehl closed 3 years ago

connorkuehl commented 3 years ago

Obsoletes #50

The only situation in which this is useful is if the certificate chain doesn't exist in the first place. This doesn't buy us anything if the certificate chain exists but is invalid (i.e., it was exported and then someone ran a platform reset).

Before, running the test suite would build 150 crates. Now, it builds 61.

Signed-off-by: Connor Kuehl ckuehl@redhat.com