Allow cose_signatures in config schema

microsoft · Dec 18, 2024 · e6c15cf · e6c15cf
1 parent 81abbc4
commit e6c15cf
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 1 deletion.
diff --git a/doc/host_config_schema/cchost_config.json b/doc/host_config_schema/cchost_config.json
@@ -427,6 +427,19 @@
                   "previous_service_identity_file": {
                     "type": "string",
                     "description": "Path to the previous service certificate (PEM) file"
+                  },
+                  "cose_signatures": {
+                    "type": "object",
+                    "properties": {
+                      "issuer": {
+                        "type": "string",
+                        "description": "Issuer, set in CWT_Claims of COSE ledger signatures. Can only be set once on service start."
+                      },
+                      "subject": {
+                        "type": "string",
+                        "description": "Subject, set in CWT_Claims of COSE ledger signatures. Can only be set once on service start."
+                      }
+                    }
                   }
                 },
                 "required": ["previous_service_identity_file"],

diff --git a/tests/config.jinja b/tests/config.jinja
@@ -54,7 +54,12 @@
     },
     "recover": {
       "initial_service_certificate_validity_days": {{ initial_service_cert_validity_days }},
-      "previous_service_identity_file": "{{ previous_service_identity_file }}"
+      "previous_service_identity_file": "{{ previous_service_identity_file }}",
+      "cose_signatures":
+      {
+        "issuer": {{ cose_signatures_issuer|tojson }},
+        "subject": {{ cose_signatures_subject|tojson }}
+      }
     }
   },
   "ledger":