openconfig / attestz

53%

main: 53%

LAST BUILD ON BRANCH vulnfix

branch: vulnfix

CHANGE BRANCH

x

Reset

Sync Branches

• vulnfix
• CLIENT
• add-chain-verify
• add-context-to-interfaces
• add-ekcert-parsing
• add-enrollz-proto
• add-test-ver-id
• addHMACtest
• aesTEST
• aik-2
• aik-tpm12
• allow-either-serial-number
• atomic-rotate
• atomic-rotate-func
• atomic-rotation-proto
• bazel8
• byte_formats
• callIssueAndRotateOwnerCertsinEnrollWithHMAC
• cert-validation-with-vendor-ca-trust-anchors
• certserialformat
• cmp.diff
• code-structure-diagrams
• comment
• commentfix
• compile_grpc
• configure-github-builds
• construct
• decryptcbc
• dependabot/go_modules/github.com/golang/glog-1.2.4
• dependabot/go_modules/golang.org/x/net-0.23.0
• dependabot/go_modules/golang.org/x/net-0.33.0
• dependabot/go_modules/golang.org/x/net-0.38.0
• dependabot/go_modules/golang.org/x/net-0.55.0
• dependabot/go_modules/google.golang.org/grpc-1.79.3
• dependabot/go_modules/google.golang.org/protobuf-1.33.0
• docUpdate
• ek-ppk-1
• ek-ppk-2
• enrollz
• enrollz-1-2
• enrollz-attestz-port
• enrollz-serial-number-bug-fix
• export-enrollz-biz-fields
• extract-pub-key-from-cert
• finaltouches
• finaltouches-temp
• fix-challenge
• fix-fetch-ek-call
• fix-go-ci-perms
• fix-proto-hmac
• fix-proto-message-name
• fix-verify
• fix-verify-hmac
• fix-verify-tpm-cert
• fix_pb_generated_files
• fixes
• followup-mutliple
• generate-certs-in-tests-on-the-fly
• hines
• hines1
• idevid-pub-key-typo
• idevie
• ignore-unexported-fields-from-x509.verifyoptions
• improve-decrypt-aes
• internal-review-request-validation
• issueOwnerIak
• issueOwnerIdevid
• iv-workaround
• lastestfix
• main
• make-backwards-compatibel
• marcushines-patch-1
• more-tests-for-tpm-cert-verifier
• morefinal
• morefixes
• multiple-control-card-refactor
• new-enum
• parse-key-p
• parse-rsa-key-params
• parse-sym-key-params
• parseidentityreq
• pass-device-id-to-tpm-cert-verifier
• pcr-example
• read-me-changes
• refactorEnroll
• remove-nonce-exchange
• renovate-cfg
• renovate/bazel-8.x
• renovate/bazel_features-1.x
• renovate/bazel_gazelle-0.x
• renovate/bazel_skylib-1.x
• renovate/com_github_grpc_grpc-1.x
• renovate/com_google_googleapis-digest
• renovate/configure
• renovate/deps
• renovate/gazelle-0.x
• renovate/google.golang.org-protobuf-1.x
• renovate/grpc-1.x
• renovate/io_bazel_rules_go-0.x
• renovate/major-deps
• renovate/major-protobuf-monorepo
• renovate/openconfig-common-ci-digest
• renovate/protobuf-monorepo
• reorg-verify-identity
• reorganize-for-go
• req-and-resp-wrapper-for-switch-owne-ca-client
• revert-72-verify-nonce-sig
• revert-79-firstchange
• revert-90-renovate/openconfig-common-ci-digest
• rm-deprecated
• rotate-flag
• rotate-oiak-cert-logic
• rotate-oidevid-support
• rotateOiak
• serial
• sno
• support-ssl-profile-id
• symCa
• test-vectors
• testing
• tpm-cert-verifier-test
• tpm-verifier-verify-tpm-cert-logic
• tpm20
• tpm20-skeleton
• unexport-funcs
• update-default-ssl-profile
• update-protos
• update-readme
• validation
• verfiy-identity
• verification
• verify-certify-info
• verify-iak-idevid
• verify-idevid
• verify-idevid-attr

Build # 28890777237

Build Type

Pull #234

github

Committed by muntazirsal

Commit Message

Move ExtKeyUsageAny setting outside intermediates check in TPM cert verifier

Moves the x509.ExtKeyUsageAny setting in VerifyOptions outside the intermediates check in VerifyAndParsePemCert, ensuring it applies unconditionally to avoid breaking enrollment for single-certificate inputs.

BUG=522385740
TAG=agy
CONV=47e03344-e537-4294-a332-8792b7bba5f4

Pull Request Pull Request #234: Move ExtKeyUsageAny setting outside intermediates check in TPM cert verified

Coverage Stats

2 of 2 new or added lines in 1 file covered. (100.0%)

2 existing lines in 1 file now uncovered.

1962 of 3705 relevant lines covered (52.96%)

0.59 hits per line