tests: verify device CA chain on rendezvous server

Use device CA cert instead of manufacturer's public key to verify the device CA chain. Signed-off-by: Miguel Martín <[email protected]>
mmartinv · Apr 2, 2024 · a7c4c1b · a7c4c1b
1 parent 8e6c6a2
commit a7c4c1b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/test/fdo/rendezvous-server.yml b/test/fdo/rendezvous-server.yml
@@ -5,6 +5,6 @@ storage_driver:
 session_store_driver:
   Directory:
     path: /etc/fdo/stores/rendezvous_sessions
-trusted_manufacturer_keys_path: /etc/fdo/keys/manufacturer_cert.pem
+trusted_manufacturer_keys_path: /etc/fdo/keys/device_ca_cert.pem
 max_wait_seconds: ~
 bind: "0.0.0.0:8082"
diff --git a/test/fmf/tests/onboarding/run-onboarding.sh b/test/fmf/tests/onboarding/run-onboarding.sh
@@ -157,7 +157,7 @@ storage_driver:
 session_store_driver:
   Directory:
     path: ${STORES_DIR}/rendezvous_sessions
-trusted_manufacturer_keys_path: ${KEYS_DIR}/manufacturer_cert.pem
+trusted_manufacturer_keys_path: ${KEYS_DIR}/device_ca_cert.pem
 max_wait_seconds: ~
 bind: "0.0.0.0:8082"
 EOF