Merge pull request #73 from msanft/fix/use-reported-tcb-vcek-url

fix: Use reported TCB when fetching VCEK
google · Aug 31, 2023 · c83c3d9 · c83c3d9
2 parents d8660ce + c673691
commit c83c3d9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/verify/verify.go b/verify/verify.go
@@ -615,7 +615,7 @@ func fillInAttestation(attestation *spb.Attestation, options *Options) error {
 		}
 	}
 	if len(chain.GetVcekCert()) == 0 {
-		vcekURL := kds.VCEKCertURL(product, report.GetChipId(), kds.TCBVersion(report.GetCurrentTcb()))
+		vcekURL := kds.VCEKCertURL(product, report.GetChipId(), kds.TCBVersion(report.GetReportedTcb()))
 		vcek, err := getter.Get(vcekURL)
 		if err != nil {
 			return &trust.AttestationRecreationErr{