ExternalVendorCode/go-attestation
1
0
Fork 0
mirror of https://github.com/google/go-attestation.git synced 2024-12-20 05:28:22 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix Intel EK certificate URLs on Linux (#347)

Browse Source
This commit is contained in:
Herman Slatman 2023-09-08 20:23:49 +02:00 committed by GitHub
parent 42c11fc152
commit 3d71f101b1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 16 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
attest/wrapped_tpm20.go
View File

@ -212,13 +212,24 @@ func (t *wrappedTPM20) eks() ([]EK, error) {
if pub.RSAParameters == nil { if pub.RSAParameters == nil {
return nil, errors.New("ECC EK not yet supported") return nil, errors.New("ECC EK not yet supported")
} }
i, err := t.info()
if err != nil {
return nil, fmt.Errorf("Retrieving TPM info failed: %v", err)
}
ekPub := &rsa.PublicKey{
E: int(pub.RSAParameters.Exponent()),
N: pub.RSAParameters.Modulus(),
}
var certificateURL string
if i.Manufacturer.String() == manufacturerIntel {
certificateURL = intelEKURL(ekPub)
}
return []EK{ return []EK{
{ {
Public: &rsa.PublicKey{ Public: ekPub,
E: int(pub.RSAParameters.Exponent()), CertificateURL: certificateURL,
N: pub.RSAParameters.Modulus(), handle: commonRSAEkEquivalentHandle,
},
handle: commonRSAEkEquivalentHandle,
}, },
}, nil }, nil
} }