commit dd434d43f52c007c2112bdc0832034e5a6759a79
author Andrey Pronin <apronin@chromium.org> Sat Mar 24 01:36:46 2018
committer Commit Bot <commit-bot@chromium.org> Fri Apr 24 06:20:51 2020
tree dcfb87c883308617628d2f30a944232918592f0e
parent 0b522b85877d3b42ff11e2df57eb271bd3aa9c7d

cryptohome, attestation: add IFX CA 50 to known CAs

Add IFX TPM EK Intermediate CA 50 to the list of known certification
authorities for verifying cros-core endorsement certificates.

BUG=b:76210800
TEST="tpm-manager verify_endorsement --cros_core" succeeds on a device
     with the TPM that has EKcert signed by this CA

Change-Id: I81084547355a039000bb153295e77f74a24dc85c
Reviewed-on: https://chromium-review.googlesource.com/979266
Commit-Ready: Andrey Pronin <apronin@chromium.org>
Tested-by: Hung-Te Lin <hungte@chromium.org>
Reviewed-by: Hung-Te Lin <hungte@chromium.org>
(cherry picked from commit 2ee6d9afc9a994324561ca1423546c64a21c59b4)
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform2/+/2162353
Reviewed-by: Chinyue Chen <chinyue@chromium.org>
Commit-Queue: Chinyue Chen <chinyue@chromium.org>
Tested-by: Chinyue Chen <chinyue@chromium.org>

cryptohome/attestation.cc

diff --git a/cryptohome/attestation.cc b/cryptohome/attestation.cc
index 1c85308..ec1d63e 100644
--- a/cryptohome/attestation.cc
+++ b/cryptohome/attestation.cc
@@ -244,7 +244,16 @@
     "30DDF9C0C31EFF3B77C6C3601AA7C3DCD10F08616C01435697746A61F920335C"
     "0C45A41149F5D22FCD23DBE35003A9AF7FD91C18715E3709F86A38AB149113C4"
     "D5273C3C90599734FF627ACBF408B082C76E486091F27446E175C50D340DA0FE"
-    "5C3FE3D590B8729F4E364E5BF7D854D9AE28EFBCD0CE8F19E6462B3A593983DF" }
+    "5C3FE3D590B8729F4E364E5BF7D854D9AE28EFBCD0CE8F19E6462B3A593983DF" },
+  { "IFX TPM EK Intermediate CA 50",
+    "ACB01856664D0C81B545DB926D25019FC2D06B4A97DFB91FD7A5AB1A803AA6F4"
+    "12FEEE5E3DEF3634172F1271E893C6848B4D156485917DF6F0504947B39F0A5A"
+    "E14FFBAB9FF00E70448E51F11DEEA1EA16287ABAAE05D3D00FEB1AA064F1CBD9"
+    "E1E67C057087110F9D3023BFA0545C97BD51E473C5B183E50C2984BD9A2DA39B"
+    "7D028B895BD939FF0822595DDC948640D06E57ED72EF43B8D8071D2C3C0497A0"
+    "EC52F682D1637F06979733BAF56DD809D24C20354D73D3849A1C0DAD23AD5CCB"
+    "F8C679242D13FFFE055CC2AB2692897F0329EEA55AF3BB10A4EB4E2937601196"
+    "90D64FB352E3D34E05AB53BD4E01EFE3EF56F6DBE315B76A31B0100BF7096093" },
 };
 
 const Attestation::PCRValue Attestation::kKnownPCRValues[] = {