clientapi

Oct 30, 2024 GO-2025-3450

  GO-2025-3450: MarbleRun unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/marblerun

Sep 16, 2024 GO-2025-3450

  GO-2025-3450: MarbleRun unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/marblerun

Sep 10, 2024 GO-2025-3450

  GO-2025-3450: MarbleRun unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/marblerun

Jun 24, 2024 GO-2025-3450

  GO-2025-3450: MarbleRun unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/marblerun

Changes in this version

type ClientAPI

+ func (a *ClientAPI) FeatureEnabled(ctx context.Context, feature string) bool

+ func (a *ClientAPI) SignQuote(ctx context.Context, quote []byte) (signature []byte, tcbStatus string, err error)

+ type QuoteVerifyError struct

+ func (e QuoteVerifyError) Error() string

+ func (e QuoteVerifyError) Unwrap() error

Feb 27, 2024 GO-2025-3450

  GO-2025-3450: MarbleRun unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/marblerun

Dec 4, 2023 GO-2024-2583 +1 more

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

  GO-2025-3450: MarbleRun unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/marblerun

Aug 25, 2023 GO-2023-2378 +2 more

  GO-2023-2378: Go package github.com/edgelesssys/marblerun CLI commands susceptible to MITM attacks

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

  GO-2025-3450: MarbleRun unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/marblerun

Jun 27, 2023 GO-2023-2378 +2 more

  GO-2023-2378: Go package github.com/edgelesssys/marblerun CLI commands susceptible to MITM attacks

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

  GO-2025-3450: MarbleRun unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/marblerun

Mar 27, 2023 GO-2023-2378 +2 more

  GO-2023-2378: Go package github.com/edgelesssys/marblerun CLI commands susceptible to MITM attacks

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

  GO-2025-3450: MarbleRun unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/marblerun

Jan 31, 2023 GO-2023-2378 +2 more

  GO-2023-2378: Go package github.com/edgelesssys/marblerun CLI commands susceptible to MITM attacks

  GO-2024-2583: Encryption bypass in github.com/edgelesssys/marblerun

  GO-2025-3450: MarbleRun unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/marblerun

Changes in this version

+ type ClientAPI struct

+ func New(store store.Store, recovery recovery.Recovery, core core, log *zap.Logger) (*ClientAPI, error)

+ func (a *ClientAPI) GetCertQuote() (cert string, certQuote []byte, err error)

+ func (a *ClientAPI) GetManifestSignature() (manifestSignatureRootECDSA, manifestSignature, manifest []byte)

+ func (a *ClientAPI) GetSecrets(requestedSecrets []string, client *user.User) (map[string]manifest.Secret, error)

+ func (a *ClientAPI) GetStatus() (state.State, string, error)

+ func (a *ClientAPI) GetUpdateLog() (string, error)

+ func (a *ClientAPI) Recover(encryptionKey []byte) (keysLeft int, err error)

+ func (a *ClientAPI) SetManifest(rawManifest []byte) (recoverySecretMap map[string][]byte, err error)

+ func (a *ClientAPI) UpdateManifest(rawUpdateManifest []byte, updater *user.User) (err error)

+ func (a *ClientAPI) VerifyUser(clientCerts []*x509.Certificate) (*user.User, error)

+ func (a *ClientAPI) WriteSecrets(rawSecretManifest []byte, updater *user.User) (err error)