Merge pull request #2 from venkyg-sec/propagate_entire_attestation_ob…

…ject propogate the attesation object as part of Extra Identifiers
venkyg-sec · Jan 21, 2024 · 5665018 · 5665018
2 parents b3047ed + b0f2bd0
commit 5665018
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/acme/challenge.go b/acme/challenge.go
@@ -456,7 +456,7 @@ func deviceAttest01Validate(ctx context.Context, ch *Challenge, db DB, jwk *jose
 
 		// Update attestation key fingerprint to compare against the CSR
 		az.Fingerprint = data.Fingerprint
-		az.ExtraIdentifiers = []string{data.SerialNumber}
+		az.ExtraIdentifiers = []string{data.SerialNumber, p.AttObj}
 
 	case "tpm":
 		data, err := doTPMAttestationFormat(ctx, prov, ch, jwk, &att)