attestation/snp: use context with timeout on THIM request

Signed-off-by: Paul Meyer <[email protected]>

internal/attestation/snp/issuer/issuer.go

@@ -44,7 +44,7 @@ func (i *Issuer) OID() asn1.ObjectIdentifier {
 }
 
 // Issue the attestation document.
-func (i *Issuer) Issue(_ context.Context, ownPublicKey []byte, nonce []byte) (res []byte, err error) {
+func (i *Issuer) Issue(ctx context.Context, ownPublicKey []byte, nonce []byte) (res []byte, err error) {
 	i.logger.Info("Issue called")
 	defer func() {
 		if err != nil {
@@ -71,7 +71,7 @@ func (i *Issuer) Issue(_ context.Context, ownPublicKey []byte, nonce []byte) (re
 
 	// Get cert chain from THIM
 	var certChain *spb.CertificateChain
-	thimRaw, err := i.thimGetter.GetCertification()
+	thimRaw, err := i.thimGetter.GetCertification(ctx)
 	if err != nil {
 		i.logger.Info("Could not retrieve THIM certification", "error", err)
 	} else {

internal/attestation/snp/issuer/thim.go

@@ -4,6 +4,7 @@
 package issuer
 
 import (
+	"context"
 	"encoding/json"
 	"encoding/pem"
 	"fmt"
@@ -78,7 +79,7 @@ func NewTHIMGetter(httpClient httpClient) *THIMGetter {
 }
 
 // GetCertification returns the THIM certification.
-func (t *THIMGetter) GetCertification() (THIMSNPCertification, error) {
+func (t *THIMGetter) GetCertification(ctx context.Context) (THIMSNPCertification, error) {
 	// Return cached response if it is still valid.
 	if cached := t.getCached(); cached != nil {
 		var certification THIMSNPCertification
@@ -102,7 +103,9 @@ func (t *THIMGetter) GetCertification() (THIMSNPCertification, error) {
 			"Metadata": {"true"},
 		},
 	}
-	resp, err := t.httpClient.Do(req)
+	reqCtx, cancel := context.WithTimeout(ctx, 3*time.Second)
+	defer cancel()
+	resp, err := t.httpClient.Do(req.WithContext(reqCtx))
 	if err != nil {
 		return THIMSNPCertification{}, fmt.Errorf("getting THIM certification: %w", err)
 	}