diff --git a/crates/utils/tcbinfo-updater/src/main.rs b/crates/utils/tcbinfo-updater/src/main.rs index a68d566..91a7dd4 100644 --- a/crates/utils/tcbinfo-updater/src/main.rs +++ b/crates/utils/tcbinfo-updater/src/main.rs @@ -9,6 +9,7 @@ use serde_json::{json, Value}; use std::collections::HashMap; use std::{fs, path::Path}; use x509_cert::Certificate; + type TcbInfo = String; type Fmspc = String; type Update = String; @@ -122,9 +123,11 @@ async fn upsert_tcbinfo() -> Result<(), &'static str> { fn verify_signature(tcbinfo: String, key: VerifyingKey) -> bool { let signed_tcbinfo = SignedTcbInfo::try_from(tcbinfo.as_ref()).expect("tcbinfo string parsing failed"); - signed_tcbinfo + if let Err(_) = signed_tcbinfo .verify(Some(&key), None) - .expect("could not verify signature"); + { + return false + } true }