Skip to content

Commit 8453ff0

Browse files
qizhangzjyao1
authored andcommitted
SecurityPkg/DeviceSecurity: Record Nonc for No Trust Anchor case.
Signed-off-by: Qi Zhang <[email protected]>
1 parent 30d09a7 commit 8453ff0

File tree

1 file changed

+1
-4
lines changed

1 file changed

+1
-4
lines changed

SecurityPkg/DeviceSecurity/SpdmSecurityLib/SpdmAuthentication.c

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -603,10 +603,7 @@ DoDeviceAuthentication (
603603
*AuthState = TCG_DEVICE_SECURITY_EVENT_DATA_DEVICE_AUTH_STATE_NO_AUTH;
604604
SecurityState->AuthenticationState = EDKII_DEVICE_SECURITY_STATE_ERROR_NO_CERT_PROVISION;
605605
Status = ExtendCertificate (SpdmDeviceContext, *AuthState, CertChainSize, CertChain, NULL, 0, *ValidSlotId, SecurityState);
606-
return Status;
607-
}
608-
609-
if (IsValidCertChain && IsValidChallengeAuthSig && RootCertMatch) {
606+
} else if (IsValidCertChain && IsValidChallengeAuthSig && RootCertMatch) {
610607
*AuthState = TCG_DEVICE_SECURITY_EVENT_DATA_DEVICE_AUTH_STATE_SUCCESS;
611608
SecurityState->AuthenticationState = EDKII_DEVICE_SECURITY_STATE_SUCCESS;
612609
Status = ExtendCertificate (SpdmDeviceContext, *AuthState, CertChainSize, CertChain, TrustAnchor, TrustAnchorSize, *ValidSlotId, SecurityState);

0 commit comments

Comments
 (0)