aTLS support #7
aTLS support #7
Conversation
…the connection initiated from the client
|
I've added the CA certificate to the quote. Please notice that I still verify the certificates after I set the session.verify attribute, this is because I need to make a request to the server to retrieve a quote and the session needs to be verified by an existing CA bundle or a CA cert we specify to make a request. This is not a problem because the session is dropped if the quote validation fails, so no requests can be made with that session anyway. I call the disconnect() method if the validation fails before I raise an error, I do this to reset the session and to delete the client key and certs from the temp files they're stored in. However, disconnect() also destroys the runner and that may be undesirable when an attestation validation fails. |
No description provided.