Skip to content

Commit

Permalink
Merge pull request #98 from deeglaze/warncert
Browse files Browse the repository at this point in the history
Remove embedded cert warning.
  • Loading branch information
deeglaze authored Jan 8, 2024
2 parents 06237f1 + d8be1f5 commit 16e7331
Show file tree
Hide file tree
Showing 2 changed files with 1 addition and 3 deletions.
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -65,7 +65,7 @@ well-formedness comes from the AMD SEV-SNP API specification, and the
requirements for certificate well-formedness come from the AMD Key Distribution
Service (KDS) specification.

This library embeds AMD's root and SEV intermediate keys
This library embeds AMD's root and SEV intermediate keys' certificates
([AMD source](https://download.amd.com/developer/eula/sev/ask_ark_milan.cert))
for the
[KDS product_name=Milan cert_chain](https://kdsintf.amd.com/vcek/v1/Milan/cert_chain)
Expand Down
2 changes: 0 additions & 2 deletions verify/verify.go
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,6 @@ import (
cpb "github.com/google/go-sev-guest/proto/check"
spb "github.com/google/go-sev-guest/proto/sevsnp"
"github.com/google/go-sev-guest/verify/trust"
"github.com/google/logger"
"github.com/pborman/uuid"
"github.com/pkg/errors"
"go.uber.org/multierr"
Expand Down Expand Up @@ -498,7 +497,6 @@ func decodeCerts(chain *spb.CertificateChain, key abi.ReportSigner, options *Opt
return nil, nil, err
}
if len(roots) == 0 {
logger.Warning("Using embedded AMD certificates for SEV-SNP attestation root of trust")
root := &trust.AMDRootCerts{
Product: productName,
// Require that the root matches embedded root certs.
Expand Down

0 comments on commit 16e7331

Please sign in to comment.