tdx/validator: enable GetCollateral

CheckRevocations doesn't work without GetCollateral.
edgelesssys · Aug 26, 2024 · 82676d4 · 82676d4
1 parent fd773d4
commit 82676d4
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/internal/attestation/tdx/validator.go b/internal/attestation/tdx/validator.go
@@ -122,6 +122,7 @@ func (v *Validator) Validate(ctx context.Context, attDocRaw []byte, nonce []byte
 	}
 	verifyOpts.TrustedRoots = rootCerts
 	verifyOpts.CheckRevocations = true
+	verifyOpts.GetCollateral = true
 	verifyOpts.Getter = v.certGetter
 
 	// Verify the report signature.