Skip to content

appraise measurements from helios rot cert chain - #428

Merged
flihp merged 1 commit into
oxidecomputer:mainfrom
flihp:appraise-measurements
Sep 16, 2026
Merged

flihp merged 1 commit into
oxidecomputer:mainfrom
flihp:appraise-measurements

Conversation

@flihp

@flihp flihp commented Sep 8, 2026 •

Copy link
Copy Markdown
Collaborator

Updates to appraise components will happen in another PR.

@flihp
flihp force-pushed the appraise-measurements branch 4 times, most recently from 1413dae to 3af1574 Compare September 16, 2026 17:02
@flihp flihp changed the title wip: appraise measurements from helios rot cert chain appraise measurements from helios rot cert chain Sep 16, 2026
@flihp
flihp marked this pull request as ready for review September 16, 2026 17:17
Measurement appraisal will only work for test cases until we decide what
policy we want to enforce in the product. Our test cases currently
evaluate a policy that requires the leaf and the last intermediates
contain measurements that correspond to reference measurements for the
"phase2" and "hbs" images. These identifiers are not yet standardised so
we limit their use to test cases.

We downgrade the sha2 crate from 0.11.0 -> 0.10.9 for compatibility with
the `digest` crate used here.
@flihp
flihp force-pushed the appraise-measurements branch from 3af1574 to de400b9 Compare September 16, 2026 20:48
@flihp
flihp merged commit e7dd1f5 into oxidecomputer:main Sep 16, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant