Function sign_cert_request

dstack-util/src/system_setup.rs:63–84

(
    cert_client: &CertRequestClient,
    key: &KeyPair,
    config: CertConfigV2,
)

use serde_json::Value;

async fn sign_cert_request(
    cert_client: &CertRequestClient,
    key: &KeyPair,
    config: CertConfigV2,
) -> Result<Vec<String>> {
    let pubkey = key.public_key_der();
    let report_data = QuoteContentType::RaTlsCert.to_report_data(&pubkey);
    let attestation = Attestation::quote(&report_data)
        .context("Failed to get quote for cert pubkey")?
        .into_versioned();
    let csr = CertSigningRequestV2 {
        confirm: "please sign cert:".to_string(),
        pubkey,
        config,
        attestation,
    };
    let signature = csr.signed_by(key).context("Failed to sign the CSR")?;
    cert_client
        .sign_csr(&csr, &signature)
        .await
        .context("Failed to sign the CSR")
}

mod config_id_verifier;