Skip to content

refactor(azure): remove legacy hardcoded intermediate certs#51

Open
samlaf wants to merge 1 commit into
flashbots:mainfrom
SeismicSystems:refactor-azure--remove-hardcoded-legacy-intermediate-certs
Open

refactor(azure): remove legacy hardcoded intermediate certs#51
samlaf wants to merge 1 commit into
flashbots:mainfrom
SeismicSystems:refactor-azure--remove-hardcoded-legacy-intermediate-certs

Conversation

@samlaf

@samlaf samlaf commented Jun 10, 2026

Copy link
Copy Markdown
Contributor

Since #49 was merged, the attestation generator fetches all intermediate certs and includes them in TpmAttest. Therefore we no longer need intermediate certs hardcoded in the verification lib, as we expect the intermediate certs to be provided by the attestation generator.

See discussion here for more context.

Since flashbots#49 was merged, the attestation generator fetches all intermediate certs and included them in TpmAttest. Therefore we no longer need hardcoded intermediate certs in the source code, as we expect the intermediate certs to be provided by the attestation generator.
@ameba23 ameba23 added the breaks protocol This is a protocol breaking change label Jun 11, 2026
@ameba23

ameba23 commented Jun 11, 2026

Copy link
Copy Markdown
Collaborator

It looks like we still have a negative test which uses one of the old fixtures, which i think will now fail to verify (if i understand correctly):

https://github.com/SeismicSystems/attested-tls/blob/2f651ba0f09f55b5be44b39bc059e54d6f1af393/crates/attestation/src/azure/mod.rs#L746-L775

So the test passes as this is a negative test and an error is expected. But maybe this is a slightly bad/misleading test now, since that attestation cannot be verified in the happy path either.

Probably we should remove legacy test assets which will no longer verify against this code, and switch this test to use your new observed attestation.

@ameba23

ameba23 commented Jun 11, 2026

Copy link
Copy Markdown
Collaborator

I labelled this as 'breaks protocol' as it (if i understand correctly) removes support for legacy azure attestations. Its debatable as to whether that should be considered protocol breaking or whether its a question of what Azure deployments we support. And actually your last PR changed the attestation payload format, so that also needs to be labelled 'breaks protocol' too.

As already mentioned we don't have production Azure instances currently so i am not concerned about this, and there is another protocol breaking change in an open PR, meaning our next release is likely to be protocol breaking (requiring both sides to be updated) anyway.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

breaks protocol This is a protocol breaking change

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants