-
Notifications
You must be signed in to change notification settings - Fork 72
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add ITA Verifier Client #530
base: tdx_rtmr
Are you sure you want to change the base?
Conversation
5a3eb4a
to
be20d42
Compare
6ddb78d
to
7b9f778
Compare
/gcbrun |
/gcbrun |
/gcbrun |
1 similar comment
/gcbrun |
InsecureSkipVerify: false, | ||
MinVersion: tls.VersionTLS12, | ||
}, | ||
Proxy: http.ProxyFromEnvironment, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do we really need the proxy setting?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Added this since it was in the example ITA sent me. I can test it out without the setting and remove it if needed.
type itaNonce struct { | ||
Val []byte `json:"val"` | ||
Iat []byte `json:"iat"` | ||
Signature []byte `json:"signature"` |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is verifying the Signature needed? Maybe in createHashedNonce
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We don't need to verify the signature - this should be done by ITA. We should - however - pass the nonce object back to ITA when requesting a token.
verifier/ita/client.go
Outdated
} | ||
|
||
// Do we have anything that needs to be in user data? | ||
// _, err = hash.Write(adapter.uData) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do we?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Removed.
/gcbrun |
/gcbrun |
No description provided.