diff --git a/CHANGELOG.md b/CHANGELOG.md index 95388bab7..bb2c12197 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -29,6 +29,10 @@ runtime - In [#1147](https://github.com/entropyxyz/entropy-core/pull/1147) a field is added to the chainspec: `jump_started_signers` which allows the chain to be started in a pre-jumpstarted state for testing. If this is not desired it should be set to `None`. +- In [#1209](https://github.com/entropyxyz/entropy-core/pull/1209) the `validate` and `change_threshold_accounts` + extrinsics no longer take a PCK certificate chain. Rather, the certificate chain is extracted from the + provided quote. The test CLI `change-threshold-accounts` command also no longer takes a PCK + certificate chain. ### Added - Protocol message versioning ([#1140](https://github.com/entropyxyz/entropy-core/pull/1140)) @@ -46,6 +50,7 @@ runtime - Update programs to accept multiple oracle data ([#1153](https://github.com/entropyxyz/entropy-core/pull/1153/)) - Use context, not block number in TDX quote input data ([#1179](https://github.com/entropyxyz/entropy-core/pull/1179)) - Allow offchain worker requests to all TSS nodes in entropy-tss test environment ([#1147](https://github.com/entropyxyz/entropy-core/pull/1147)) +- Extract PCK certificate chain from quotes ([#1209](https://github.com/entropyxyz/entropy-core/pull/1209)) ### Fixed diff --git a/crates/client/src/tests.rs b/crates/client/src/tests.rs index c07cc5f07..bf3870102 100644 --- a/crates/client/src/tests.rs +++ b/crates/client/src/tests.rs @@ -119,6 +119,9 @@ async fn test_change_threshold_accounts() { let nonce = request_attestation(&api, &rpc, tss_signer_pair.signer()).await.unwrap(); let nonce: [u8; 32] = nonce.try_into().unwrap(); + // Our runtime is using the mock `PckCertChainVerifier`, which means that the expected + // "certificate" basically is just our TSS account ID. This account needs to match the one + // used to sign the following `quote`. let mut pck_seeder = StdRng::from_seed(tss_public_key.0.clone()); let pck = tdx_quote::SigningKey::random(&mut pck_seeder); let encoded_pck = encode_verifying_key(&pck.verifying_key()).unwrap().to_vec(); @@ -132,6 +135,7 @@ async fn test_change_threshold_accounts() { ); let signing_key = tdx_quote::SigningKey::random(&mut OsRng); + tdx_quote::Quote::mock(signing_key.clone(), pck.clone(), input_data.0, encoded_pck.clone()) .as_bytes() .to_vec()