Skip to content

Commit 2d8d227

Browse files
emateryTHS-on
andauthored
Update 1552_ek_certificate_chain.md
Co-authored-by: Thore Sommer <[email protected]>
1 parent 65e12f4 commit 2d8d227

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

1552_ek_certificate_chain.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -130,7 +130,7 @@ The keylime registrar only needs to store the certificate chain in the database.
130130
The keylime tenant must detect the presence of an EK Certificate Chain and verify the
131131
EK Cert against the chain, and finally the top level certificate against the `tpm_cert_store`.
132132

133-
The flow can be kept mostly as it is in `check_ek`. In case of a present ek_ca_chain, the ek must be verified against the provided chain and in case of a success the ek will be replaced by the top level certificate from the chain. Afterwards the flow can be kept as it was.
133+
The flow can be kept mostly as it is in `check_ek`. In case of multiple certs in `ekcert` , the ek must be verified against the provided chain and in case of a success the ek will be replaced by the top level certificate from the chain. Afterwards the flow can be kept as it was.
134134

135135
See provided implementation:
136136
* rust-keylime: https://github.com/ematery/rust-keylime/commit/ff448ec9f68a50b89685f8f4f3e6777d8c80ef1b

0 commit comments

Comments
 (0)