snp: enable crl checking

edgelesssys · Jan 11, 2024 · ae694db · ae694db
1 parent 7c58e99
commit ae694db
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/internal/attestation/snp/validator.go b/internal/attestation/snp/validator.go
@@ -99,9 +99,10 @@ func (v *Validator) Validate(ctx context.Context, attDocRaw []byte, nonce []byte
 
 	// Report signature verification.
 
-	verifyOpts := &verify.Options{
-		Getter: v.kdsGetter,
-	}
+	verifyOpts := verify.DefaultOptions()
+	verifyOpts.CheckRevocations = true
+	verifyOpts.Getter = v.kdsGetter
+
 	attestation, err := verify.GetAttestationFromReport(report, verifyOpts)
 	if err != nil {
 		return fmt.Errorf("getting attestation from report: %w", err)