feat(config): default bare target entries to GENERATE mode
PATCH and AUTO modes inherit the real TEE's attestation quirks (epoch 0 cert dates, version mismatch, missing USAGE_COUNT_LIMIT) which can't be fixed in post-patch. GENERATE mode builds attestation from scratch with full control over every field. Users who want real TEE key generation can still use the ? suffix for explicit PATCH mode.
This commit is contained in:
@@ -164,9 +164,8 @@ object ConfigurationManager {
|
|||||||
newModes[pkg] = Mode.PATCH
|
newModes[pkg] = Mode.PATCH
|
||||||
newKeyboxes[pkg] = currentKeybox
|
newKeyboxes[pkg] = currentKeybox
|
||||||
}
|
}
|
||||||
// No suffix means AUTO mode.
|
|
||||||
else -> {
|
else -> {
|
||||||
newModes[trimmedLine] = Mode.AUTO
|
newModes[trimmedLine] = Mode.GENERATE
|
||||||
newKeyboxes[trimmedLine] = currentKeybox
|
newKeyboxes[trimmedLine] = currentKeybox
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user