What were you trying to do that didn't work?

snpguest verify attestation on Turin with snp guest

What is the impact of this issue to you?

cannot verify attestation in snp guest

Please provide the package NVR for which the bug is seen:

snpguest-0.8.3-1.el10

How reproducible is this bug?:

100%

Steps to reproduce

1. Boot an AMD SEV-SNP enabled guest
2. Generate an attestation report: snpguest report attestation-report.bin request-data.txt --random
3. Fetch the VCEK certificate using the report: snpguest fetch vcek pem turin ./ attestation-report.bin
4. Verify the certificate chain and attestation report: snpguest verify certs ./ snpguest verify attestation ./ attestation-report.bin

Expected results

VEK signed the Attestation Report!

Actual results

ERROR: VEK did NOT sign the Attestation Report!
Error: VEK did NOT sign the Attestation Report!
Error: Failed to verify attestation.

additonal info

With upstream snpguest version: snpguest-0.10.0, cannot reproduce this issue.