From d8be1f593cf9af521c795f4113cb97d0ff8f72e9 Mon Sep 17 00:00:00 2001 From: Dionna Glaze Date: Mon, 8 Jan 2024 17:21:49 +0000 Subject: [PATCH] Remove embedded cert warning. --- README.md | 2 +- verify/verify.go | 2 -- 2 files changed, 1 insertion(+), 3 deletions(-) diff --git a/README.md b/README.md index df79d3c..ee72880 100644 --- a/README.md +++ b/README.md @@ -65,7 +65,7 @@ well-formedness comes from the AMD SEV-SNP API specification, and the requirements for certificate well-formedness come from the AMD Key Distribution Service (KDS) specification. -This library embeds AMD's root and SEV intermediate keys +This library embeds AMD's root and SEV intermediate keys' certificates ([AMD source](https://download.amd.com/developer/eula/sev/ask_ark_milan.cert)) for the [KDS product_name=Milan cert_chain](https://kdsintf.amd.com/vcek/v1/Milan/cert_chain) diff --git a/verify/verify.go b/verify/verify.go index 7c0f3f1..980f744 100644 --- a/verify/verify.go +++ b/verify/verify.go @@ -28,7 +28,6 @@ import ( cpb "github.com/google/go-sev-guest/proto/check" spb "github.com/google/go-sev-guest/proto/sevsnp" "github.com/google/go-sev-guest/verify/trust" - "github.com/google/logger" "github.com/pborman/uuid" "github.com/pkg/errors" "go.uber.org/multierr" @@ -498,7 +497,6 @@ func decodeCerts(chain *spb.CertificateChain, key abi.ReportSigner, options *Opt return nil, nil, err } if len(roots) == 0 { - logger.Warning("Using embedded AMD certificates for SEV-SNP attestation root of trust") root := &trust.AMDRootCerts{ Product: productName, // Require that the root matches embedded root certs.