fix(snp): remove comment about SEV-SNP TCB
According to AMD, the ReportedTcb is the one we need for the VCEK key.
Reported <= Committed <= Current
Further infos:
[Video]
(https://youtu.be/7R0rnQfi86I)
[Slides]
(https://developer.amd.com/wp-content/resources/LSS-SNP_Attestation-r4.pdf)
@@ -7,7 +7,7 @@ use std::io::{self, ErrorKind, Read};
use std::os::unix::fs::OpenOptionsExt;
use std::path::PathBuf;
-use anyhow::{anyhow, Context};
+use anyhow::Context;
/// Return a reader, which provides the VCEK certificate
pub fn get_vcek_reader() -> anyhow::Result<Box<dyn Read>> {
@@ -66,14 +66,6 @@ fn get_vcek_url_path() -> anyhow::Result<(String, String)> {
.platform_status()
.context("failed to query platform status")?;
- // Ensure the versions match.
- if status.tcb.platform_version != status.tcb.reported_version {
- // It is not clear from the documentation what the difference between the two is,
- // therefore only proceed if they are identical to ensure correctness.
- // TODO: Figure out which one should be used and drop this check.
- return Err(anyhow!("reported TCB version mismatch"));
- }
-
let url = id.vcek_url(&status.tcb.reported_version);
let path = id.vcek_cache_name(&status.tcb.reported_version);
