kbs: make token verifier initialization async

This is useful if any token verifier needs initialization data pulled remotely. Signed-off-by: Mikko Ylinen <[email protected]>
confidential-containers · Aug 30, 2024 · bba0b9c · bba0b9c
1 parent 721c167
commit bba0b9c
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/kbs/src/lib.rs b/kbs/src/lib.rs
@@ -240,7 +240,7 @@ impl ApiServer {
 
         #[cfg(feature = "resource")]
         let token_verifier =
-            crate::token::create_token_verifier(self.attestation_token_config.clone())?;
+            crate::token::create_token_verifier(self.attestation_token_config.clone()).await?;
 
         #[cfg(feature = "policy")]
         let policy_engine = PolicyEngine::new(&self.policy_engine_config).await?;

diff --git a/kbs/src/token/mod.rs b/kbs/src/token/mod.rs
@@ -34,7 +34,7 @@ pub struct AttestationTokenVerifierConfig {
     pub trusted_certs_paths: Vec<String>,
 }
 
-pub fn create_token_verifier(
+pub async fn create_token_verifier(
     config: AttestationTokenVerifierConfig,
 ) -> Result<Arc<RwLock<dyn AttestationTokenVerifier + Send + Sync>>> {
     match config.attestation_token_type {