Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 84187967 authored by Shikha Panwar's avatar Shikha Panwar
Browse files

VTS to use enum for MissingAction

ConstraintSpec constructor will take enum instead of boolean for missing
action.

Test: atest VtsSecretkeeperTargetTest
Bug: 291213394
Change-Id: I55fb0d8ef1fccca5feedf1fd368854ffb7eafaaf
parent 04b5d667
Loading
Loading
Loading
Loading
+4 −8
Original line number Diff line number Diff line
@@ -26,7 +26,7 @@ use authgraph_vts_test as ag_vts;
use authgraph_boringssl as boring;
use authgraph_core::key;
use coset::{CborSerializable, CoseEncrypt0};
use dice_policy::{ConstraintSpec, ConstraintType, DicePolicy};
use dice_policy::{ConstraintSpec, ConstraintType, DicePolicy, MissingAction};
use secretkeeper_client::dice::OwnedDiceArtifactsWithExplicitKey;
use secretkeeper_client::SkSession;
use secretkeeper_core::cipher;
@@ -255,16 +255,12 @@ fn sealing_policy(dice: &[u8]) -> Vec<u8> {
    let security_version: i64 = -70005;

    let constraint_spec = [
        ConstraintSpec::new(
            ConstraintType::ExactMatch,
            vec![authority_hash],
            /* Optional */ false,
        ),
        ConstraintSpec::new(ConstraintType::ExactMatch, vec![key_mode], false),
        ConstraintSpec::new(ConstraintType::ExactMatch, vec![authority_hash], MissingAction::Fail),
        ConstraintSpec::new(ConstraintType::ExactMatch, vec![key_mode], MissingAction::Fail),
        ConstraintSpec::new(
            ConstraintType::GreaterOrEqual,
            vec![config_desc, security_version],
            true,
            MissingAction::Ignore,
        ),
    ];