Improve tcb advisory error test

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
edgelesssys · Oct 2, 2024 · 5035c93 · 5035c93
1 parent f1130a8
commit 5035c93
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/api/attestation/attestation_test.go b/api/attestation/attestation_test.go
@@ -244,6 +244,7 @@ func TestVerifyCertificate(t *testing.T) {
 		"tcb error with advisories rejected": {
 			config: func() Config {
 				config := defaultConfig
+				config.AcceptedTCBStatuses = []string{"SWHardeningNeeded"}
 				config.AcceptedAdvisories = []string{"INTEL-SA-0002"}
 				return config
 			}(),
@@ -278,6 +279,25 @@ func TestVerifyCertificate(t *testing.T) {
 				}, attestation.ErrTCBLevelInvalid
 			},
 		},
+		"report contains tcb advisory parsing error": {
+			config: func() Config {
+				config := defaultConfig
+				config.AcceptedTCBStatuses = []string{"SWHardeningNeeded"}
+				config.AcceptedAdvisories = []string{"INTEL-SA-0001"}
+				return config
+			}(),
+			verify: func([]byte) (attestation.Report, error) {
+				return attestation.Report{
+					Data:             quoteData[:],
+					SecurityVersion:  2,
+					ProductID:        []byte{0x03, 0x00},
+					SignerID:         []byte{0xAB, 0xCD},
+					TCBStatus:        tcbstatus.SWHardeningNeeded,
+					TCBAdvisoriesErr: assert.AnError,
+				}, attestation.ErrTCBLevelInvalid
+			},
+			wantErr: true,
+		},
 	}
 
 	for name, tc := range testCases {