FAPI: Fix intermediate self signed certificate. #2739
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
If a certificate which is downloaded from the uri defined in the EK certificate is self signed it can't be verified. It will not be stored in the certificate store. Self signed certificates have to be defined in the list of root certificates of FAPI. Fixes tpm2-software#2738 Signed-off-by: Juergen Repp <[email protected]>
JuergenReppSIT
force-pushed
the
fapi-fix-self-signed-certificate
branch
from
1fe18e0 to
8eba94c
Compare
Nuvoton TPM Root CA 1210 and 2112 are added. Signed-off-by: Juergen Repp <[email protected]>
JuergenReppSIT
force-pushed
the
fapi-fix-self-signed-certificate
branch
from
5124f33 to
25cb22c
Compare
Codecov ReportAttention:
Additional details and impacted files@@ Coverage Diff @@
## master #2739 +/- ##
=======================================
Coverage 82.55% 82.55%
=======================================
Files 369 369
Lines 43149 43156 +7
=======================================
+ Hits 35620 35626 +6
- Misses 7529 7530 +1 ☔ View full report in Codecov by Sentry. |
AndreasFuchsTPM
approved these changes
Jan 10, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
If a certificate which is downloaded from the uri defined in the EK certificate is self signed it can't be verified. It will not be stored in the certificate store. Self signed certificates have to be defined in the list of root certificates of FAPI.
Further Nuvoton root certificates TPM Root CA 1210 and 2112 are added.
Fixes #2738