Skip to content

Update verify_attestation_chains with new manufacturer cert - #14650

Merged
iennae merged 1 commit into
GoogleCloudPlatform:mainfrom
hannahbrodheim:patch-1
Oct 19, 2026
Merged

iennae merged 1 commit into
GoogleCloudPlatform:mainfrom
hannahbrodheim:patch-1

Conversation

@hannahbrodheim

Copy link
Copy Markdown
Contributor

The certificate expired and a new certificate to the same key now exists.

Update the script to point to the new certificate instead of the expired certificate.

Description

Checklist

Testing

  • I have tested this change on a live environment and verified it works as intended.

Compliance & Style


Post-Approval Actions

  • Please merge this PR for me once it is approved

The certificate expired and a new certificate to the same key now exists. 

Update the script to point to the new certificate instead of the expired certificate.
@hannahbrodheim
hannahbrodheim requested review from a team as code owners October 19, 2026 17:56
@product-auto-label product-auto-label Bot added samples Issues that are directly related to samples. api: cloudkms Issues related to the Cloud Key Management Service API. labels Oct 19, 2026

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the manufacturer certificate URL and the certificate filename inside the downloaded ZIP archive. The review feedback suggests loading the manufacturer certificate URL from an environment variable to avoid runtime failures due to placeholder values, and dynamically searching for the .crt file inside the ZIP archive instead of hardcoding the filename to improve robustness.

Comment thread kms/attestations/verify_attestation_chains.py
Comment thread kms/attestations/verify_attestation_chains.py
@iennae
iennae merged commit 83a4a2b into GoogleCloudPlatform:main Oct 19, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

api: cloudkms Issues related to the Cloud Key Management Service API. samples Issues that are directly related to samples.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants