hyperledger / hyperledger/fabric-private-chaincode
Enhance certificate decoding in attestation API
Open
enhancement
feature
- Dominant language
- Go
- Stars
- 174
- Forks
- 98
- Avg merge
- 2d 21h
- Merged PRs (30d)
- 1
Description
The certificate decoding procedure in the attestation API should consider using a more robust implementation, possibly based on CURL lib (see https://curl.se/libcurl/c/curl_unescape.html).
Problem: IAS certificates are downloaded and saved in URL encoded form, then passed the attestation API in C++, where they are decoded. The decoder uses an optimistic procedure, which is not robust. A better approach would require libcurl. However, this is currently not available inside FPC enclaves.
Contributor guide
Assessment
This issue has not been assessed yet.