6 commits

Author	SHA1	Message	Date
Harald Hoyer	204aa33f7f	fix(tee-vault-unseal): pick either VAULT_AUTH_TEE_SHA256 string or file ... Pick either `VAULT_AUTH_TEE_SHA256` or `VAULT_AUTH_TEE_SHA256_FILE`, with `VAULT_AUTH_TEE_SHA256` having the precedence. Signed-off-by: Harald Hoyer <harald@matterlabs.dev>	2024-07-03 14:42:06 +02:00
Harald Hoyer	f1b8a48a6a	fix: update the common cacert and include it in the unseal container ... The previous cacert expired. A new one was created and also included in the unseal container. The path to access the cacert was fixed in the unseal app and made configurable via an environment variable.	2024-07-03 11:26:29 +02:00
Harald Hoyer	1f850d060e	feat(tee-vault-unseal): add VAULT_AUTH_TEE_SHA256_FILE ... If `VAULT_AUTH_TEE_SHA256_FILE` is set, read the sha value from the file, rather from the environment variable. Signed-off-by: Harald Hoyer <harald@matterlabs.dev>	2024-06-10 14:19:25 +02:00
Harald Hoyer	0b60abc030	feat: use real RA-TLS for everything ... * add `tee-ratls-preexec` for creating the vault certificate * remove the old attestation API Signed-off-by: Harald Hoyer <harald@matterlabs.dev>	2024-02-27 16:44:28 +01:00
Harald Hoyer	2591bf0807	chore(deps): rustls-pemfile 2 ... Signed-off-by: Harald Hoyer <harald@matterlabs.dev>	2024-02-15 10:23:29 +01:00
Harald Hoyer	89ffbd35a8	feat: initial commit ... Signed-off-by: Harald Hoyer <harald@matterlabs.dev>	2024-02-09 10:10:53 +01:00