Affected by GO-2023-2378 and 1 other vulnerabilities

GO-2023-2378: Go package github.com/edgelesssys/marblerun CLI commands susceptible to MITM attacks

GO-2025-3450: MarbleRun unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/marblerun

config

package

v0.2.0 Latest Latest Go to latest Published: Dec 16, 2020 License: MPL-2.0 Imports: 0 Imported by: 1

Details

Package config defines the environment variables expected by the Marble for configuration settings.

View Source

const CoordinatorAddr = "EDG_MARBLE_COORDINATOR_ADDR"

CoordinatorAddr is the marble's addr to connect to the coordinator via gRPC

View Source

const DNSNames = "EDG_MARBLE_DNS_NAMES"

DNSNames are the alternative dns names for the marble's certificate

View Source

const Type = "EDG_MARBLE_TYPE"

Type is the marble's type used for attestation with the coordinator

View Source

const UUIDFile = "EDG_MARBLE_UUID_FILE"

UUIDFile is the file path to store the marble's uuid

This section is empty.

This section is empty.

This section is empty.