Update attestation verification with additional quote statuses (#610)

* fix cpp linter string
* update attestation API with newer report verification capability
* update pdo with new crypto lib

Signed-off-by: Bruno Vavala <[email protected]>

common/crypto/CMakeLists.txt

@@ -23,6 +23,7 @@ FILE(GLOB PROJECT_SOURCES
     "pdo-crypto-c-wrapper.cpp"
     "$ENV{FPC_PATH}/common/base64/base64.cpp"
     "$ENV{FPC_PATH}/common/json/parson.c"
+    "$ENV{FPC_PATH}/common/utils.c" #for append_string in parson
     "attestation-api/evidence/*.cpp"
     )
 

common/crypto/attestation-api/evidence/verify-evidence.cpp

@@ -150,9 +150,11 @@ bool verify_ias_evidence(
 
     {
         // verify report status
-        const int group_out_of_date_ok = 1;
-        COND2LOGERR(VERIFY_SUCCESS != verify_enclave_quote_status(ias_report.c_str(),
-                                          ias_report.length(), group_out_of_date_ok),
+        const unsigned int flags = QSF_ACCEPT_GROUP_OUT_OF_DATE | QSF_ACCEPT_CONFIGURATION_NEEDED |
+                                   QSF_ACCEPT_SW_HARDENING_NEEDED |
+                                   QSF_ACCEPT_CONFIGURATION_AND_SW_HARDENING_NEEDED;
+        COND2LOGERR(VERIFY_SUCCESS !=
+                        verify_enclave_quote_status(ias_report.c_str(), ias_report.length(), flags),
             "invalid quote status");
     }
 

scripts/cpplinter.sh

@@ -48,7 +48,7 @@ done
 #if check fails, provide instructions for fixing the format
 if [[ $RET != 0 ]]
 then
-    echo "Format check failed. Run '$0 DO_FORMAT' to fix the format."
+    echo "Format check failed. Run '$0 <top folder> DO_FORMAT' to fix the format."
 fi
 
 exit $RET