Merge "VTS to use enum for MissingAction am: 84187967cb am: 37813dbd44" into main

This commit is contained in:
Automerger Merge Worker
2024-01-16 19:24:34 +00:00
committed by Android (Google) Code Review

View File

@@ -26,7 +26,7 @@ use authgraph_vts_test as ag_vts;
use authgraph_boringssl as boring;
use authgraph_core::key;
use coset::{CborSerializable, CoseEncrypt0};
use dice_policy::{ConstraintSpec, ConstraintType, DicePolicy};
use dice_policy::{ConstraintSpec, ConstraintType, DicePolicy, MissingAction};
use secretkeeper_client::dice::OwnedDiceArtifactsWithExplicitKey;
use secretkeeper_client::SkSession;
use secretkeeper_core::cipher;
@@ -255,16 +255,12 @@ fn sealing_policy(dice: &[u8]) -> Vec<u8> {
let security_version: i64 = -70005;
let constraint_spec = [
ConstraintSpec::new(
ConstraintType::ExactMatch,
vec![authority_hash],
/* Optional */ false,
),
ConstraintSpec::new(ConstraintType::ExactMatch, vec![key_mode], false),
ConstraintSpec::new(ConstraintType::ExactMatch, vec![authority_hash], MissingAction::Fail),
ConstraintSpec::new(ConstraintType::ExactMatch, vec![key_mode], MissingAction::Fail),
ConstraintSpec::new(
ConstraintType::GreaterOrEqual,
vec![config_desc, security_version],
true,
MissingAction::Ignore,
),
];