attetstation: enable Azure TDX CRL checking (#3160)

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
edgelesssys · Jun 12, 2024 · 8b76dd6 · 8b76dd6
1 parent c682558
commit 8b76dd6
Showing 1 changed file with 4 additions and 5 deletions.
diff --git a/internal/attestation/azure/tdx/validator.go b/internal/attestation/azure/tdx/validator.go
@@ -93,11 +93,10 @@ func (v *Validator) validateQuote(tdxQuote *tdx.QuoteV4) error {
 	roots.AddCert((*x509.Certificate)(&v.cfg.IntelRootKey))
 
 	if err := verify.TdxQuote(tdxQuote, &verify.Options{
-		// TODO: Re-enable CRL checking once issues on Azure's side are resolved.
-		// CheckRevocations: true,
-		// GetCollateral:    true,
-		TrustedRoots: roots,
-		Getter:       v.getter,
+		CheckRevocations: true,
+		GetCollateral:    true,
+		TrustedRoots:     roots,
+		Getter:           v.getter,
 	}); err != nil {
 		return err
 	}