Callout evidence and certificate change
Update CHANGELOG.md
@@ -38,7 +38,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
- HAS_QUOTE_PROVIDER cmake option has been removed. This is a continuation of the work in the previous release to allow the same build of OE SDK to run on both FLC and non-FLC machines.
- Intel SGX EnclaveCommonAPI packages are no longer needed to build the SDK.
- oe_verify_attestation_certificate_with_evidence() can now verify certificates generated by oe_generate_attestation_certificate() as well as oe_get_attestation_certificate_with_evidence().
-- The SGX attestation evidence internal structure has changed. The current structure (version 3) is not compatible with the previous version. Applications that call the experimental oe_get_evidence() or oe_verify_evidence() APIs have to be rebuilt.
+- The SGX attestation evidence internal structure has changed. The current structure (version 3) is not compatible with the previous version. Evidence/certificates generated prior to v0.11.0 cannot be verified by v0.11.0 verifiers. Applications that call the following experimental APIs must link to OE SDK v0.11.0 or above:
+ - oe_get_evidence()
+ - oe_verify_evidence()
+ - oe_get_attestation_certificate_with_evidence()
+ - oe_verify_attestation_certificate_with_evidence()
- Some SGX attestation format IDs have been renamed:
| Old | New |
