attestation

Documentation

Index

• type Client
  • func NewClient(tpmAttestationCABaseURL string, options ...Option) (*Client, error)
  • func (ac *Client) Attest(ctx context.Context, t *tpm.TPM, ek *tpm.EK, ak *tpm.AK) ([]*x509.Certificate, error)
• type Option
  • func WithInsecure() Option
  • func WithRootsFile(filename string) Option
• type Options

Types

type Client

type Client struct {
	// contains filtered or unexported fields
}

func NewClient

func NewClient(tpmAttestationCABaseURL string, options ...Option) (*Client, error)

NewClient creates a new Client that can be used to perform remote attestation.

func (*Client) Attest

func (ac *Client) Attest(ctx context.Context, t *tpm.TPM, ek *tpm.EK, ak *tpm.AK) ([]*x509.Certificate, error)

Attest performs remote attestation using the AK backed by TPM t.

TODO: support multiple EKs again? Currently selection of the EK is left to the caller.

type Option

type Option func(o *Options) error

func WithInsecure

func WithInsecure() Option

WithInsecure disables TLS server certificate chain checking. In general this shouldn't be used, but it can be of use in during development and testing.

func WithRootsFile

func WithRootsFile(filename string) Option

WithRootsFile can be used to set the trusted roots when setting up a TLS connection. An empty filename will be ignored.

type Options

type Options struct {
	// contains filtered or unexported fields
}