Skip to content

fix(nvidia remote verifier): NRAS response length correction - #1573

Open
valzaitsev wants to merge 1 commit into
confidential-containers:mainfrom
valzaitsev:fix-nras-response
Open

fix(nvidia remote verifier): NRAS response length correction#1573
valzaitsev wants to merge 1 commit into
confidential-containers:mainfrom
valzaitsev:fix-nras-response

Conversation

@valzaitsev

Copy link
Copy Markdown

The first field of NRAS response consists of two elements: string "JWT" and base64 of actual JWT. But due to the typo the code was checking the length of the second field. Because of that all valid NRAS responses were failing with "Unexpected Payload Format" error. This PR fixes that, so NRAS responses are properly processed by nvidia verifier in remote mode.

Signed-off-by: Valentin Zaitsev <8722423+valzaitsev@users.noreply.github.com>
@valzaitsev
valzaitsev requested a review from a team as a code owner August 18, 2026 07:31

@Xynnn007 Xynnn007 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @valzaitsev ! I brought in the bug but luckily it will be fixed. Only one comment

let response: NrasResponseInternal = serde_json::from_str(s)?;

if response.1.len() != 2 {
//Expect 2 elements in the NRAS payload

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We do not need this comment, just add it to commit message

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants