cli: print vcek certificate extensions and snp attestation report during verify

[katexochen]

Proposed change(s)

• Adding additional output to the verify command:
  • The extensions of the VCEK are know parsed and printed.
  • The AMD SEV-SNP report is now parsed and printed.

Example output:

diff --git a/output_old.txt b/output_new.txt
index f3894c23..5510f212 100644
--- a/output_old.txt
+++ b/output_new.txt
@@ -45,6 +45,17 @@ Attestation Document:
 		Not After: 2030-05-02 17:50:16 +0000 UTC
 		Signature Algorithm: SHA384-RSAPSS
 		Public Key Algorithm: ECDSA
+		Struct version: 0
+		Product name: Milan-B0
+		Secure Processor bootloader SVN: 3
+		Secure Processor operating system SVN: 0
+		SVN 4 (reserved): 0
+		SVN 5 (reserved): 0
+		SVN 6 (reserved): 0
+		SVN 7 (reserved): 0
+		SEV-SNP firmware SVN: 8
+		Microcode SVN: 115
+		Hardware ID: 0x094a46eea5fde950946e4b4743d496aa7a51ac48ad37886afcc46af66918048dea499528f61ad55afbd4febe276ddc9c6632930fd12e0e2c8a88724b5c51dfd7
 	Raw Certificate chain:
 		-----BEGIN CERTIFICATE-----
 		MIIGiTCCBDigAwIBAgIDAQABMEYGCSqGSIb3DQEBCjA5oA8wDQYJYIZIAWUDBAIC
@@ -136,5 +147,75 @@ Attestation Document:
 		Not After: 2045-10-22 17:23:05 +0000 UTC
 		Signature Algorithm: SHA384-RSAPSS
 		Public Key Algorithm: RSA
+	SNP Report:
+		Version: 2
+		Guest SVN: 5
+		Policy:
+			ABI Minor: 31
+			ABI Major: 0
+			Symmetric Multithreading enabled: true
+			Migration agent enabled: false
+			Debugging enabled (host decryption of VM): false
+			Single socket enabled: false
+		Family ID: 01000000000000000000000000000000
+		Image ID: 02000000000000000000000000000000
+		VMPL: 0
+		Signature Algorithm: 1
+		Current TCB:
+			Secure Processor bootloader SVN: 3
+			Secure Processor operating system SVN: 0
+			SVN 4 (reserved): 0
+			SVN 5 (reserved): 0
+			SVN 6 (reserved): 0
+			SVN 7 (reserved): 0
+			SEV-SNP firmware SVN: 8
+			Microcode SVN: 206
+		Platform Info:
+			Symmetric Multithreading enabled (SMT): true
+			Transparent secure memory encryption (TSME): false
+		Author Key ID: 0
+		Report Data: 8d9419058a1892bb994907d2fcf668500f9022a4908d169d2752ad0ebe98ca6a0000000000000000000000000000000000000000000000000000000000000000
+		Measurement: 43abf28f1124609aa3d187952d2a1a74f703f0bce6a4f7d7d0206459604707cf8b5f8b360c57c4b176461d5f542e2b06
+		Host Data: 0000000000000000000000000000000000000000000000000000000000000000
+		ID Key Digest: 0356215882a825279a85b300b0b742931d113bf7e32dde2e50ffde7ec743ca491ecdd7f336dc28a6e0b2bb57af7a44a3
+		Author Key Digest: 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
+		Report ID: 9d75319462b77e8eb29d8999b4710de412e5389245e2e58ed1896a4f35d0083b
+		Report ID MA: ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
+		Reported TCB:
+			Secure Processor bootloader SVN: 3
+			Secure Processor operating system SVN: 0
+			SVN 4 (reserved): 0
+			SVN 5 (reserved): 0
+			SVN 6 (reserved): 0
+			SVN 7 (reserved): 0
+			SEV-SNP firmware SVN: 8
+			Microcode SVN: 115
+		Chip ID: 094a46eea5fde950946e4b4743d496aa7a51ac48ad37886afcc46af66918048dea499528f61ad55afbd4febe276ddc9c6632930fd12e0e2c8a88724b5c51dfd7
+		Committed TCB:
+			Secure Processor bootloader SVN: 3
+			Secure Processor operating system SVN: 0
+			SVN 4 (reserved): 0
+			SVN 5 (reserved): 0
+			SVN 6 (reserved): 0
+			SVN 7 (reserved): 0
+			SEV-SNP firmware SVN: 8
+			Microcode SVN: 115
+		Current Build: 4
+		Current Minor: 52
+		Current Major: 1
+		Committed Build: 4
+		Committed Minor: 52
+		Committed Major: 1
+		Launch TCB:
+			Secure Processor bootloader SVN: 3
+			Secure Processor operating system SVN: 0
+			SVN 4 (reserved): 0
+			SVN 5 (reserved): 0
+			SVN 6 (reserved): 0
+			SVN 7 (reserved): 0
+			SEV-SNP firmware SVN: 8
+			Microcode SVN: 115
+		Signature:
+			3065023100c3efb7284f2f0587e2327ecc1ba9db1d2966dfa52e7c780a133c18d9732188eb3228ed708454ad9a8b753f1a24efa4cb02300c8ee2de1f3ed84dcb9a65ea5a0d3795ca82515b857d0da04927f65b806e4b138cd6a43cc489888a25abc72d9c9a1609
 
 Verification OK

Checklist

• Update docs
• Add labels (e.g., for changelog category)
• Is PR title adequate for changelog?
• Link to Milestone

[msanft]

constellation/dev-docs/workflows/pull-request.md

Line 41 in a3184af

and `<title>` is all lower case (except proper names, including acronyms).

[msanft]

works as expected🚀

[derpsteb]

LGTM 👍
Works fine against an existing Azure cluster.

Something that might be useful to add at some point: add a flag to print the structs as json/yaml so the CLI's output can be parsed more easily. But since we don't keep an eye on output parseability for other commands I don't see a need here.