Verify the quote certificate chain

[nick-mobilecoin]

No description provided.

[nick-mobilecoin]

Current dependencies on/for this PR:

• develop
  • PR Verify enclave report body #21
    • PR Verify the attestation key #22
      • PR Utilize RustCrypto for SecP256R1 #27
        • PR Verify the quote certificate chain #28 👈
        • PR Consolidate workspaces into one #32
          • PR Rename sys crates to ffi #33
            • PR Add Cargo nono to the ci lint check #35

This comment was auto-generated by Graphite.

[awygle]

This looks good! It might be worth citing some source for the certificate ordering, if we have one, or mentioning it's empirically determined, but I wouldn't block on that.

[NotGyro]

Tests are failing in CI, but it looks like that's just because somebody needs to build this locally so that Cargo.lock gets updated, and then commit the updated Cargo.lock. The specific error message is error: the lock file /__w/sgx/sgx/untrusted/Cargo.lock needs to be updated but --locked was passed to prevent this

I could try this, but I don't know if I'd be stepping on anything important by committing to this branch right now.

[nick-mobilecoin]

Tests are failing in CI

Should be good now, if I did it all correctly...

[NotGyro]

Looks good! I like the concise but informative comments.