google / go-sev-guest

go-sev-guest offers a library to wrap the /dev/sev-guest device in Linux, as well as a library for attestation verification of fundamental components of an attestation report.
Apache License 2.0
52 stars 19 forks source link

Allow certentry Validate to fail before error #111

Closed deeglaze closed 8 months ago

deeglaze commented 8 months ago

If a certificate is missing, the blob will be nil on lookup. This changes the contract with Validate to allow nil blobs to mean "try to fetch this yourself" in the case that the evidence is not present locally but its location can possibly be inferred from the report.