George K 49c6191bbe fix(coderd/azureidentity): add Azure IMDS G2 chain certificates (#25243) ...

Azure IMDS attested data signatures can now chain through
Microsoft TLS G2 RSA CA OCSP intermediates, then through the
cross-signed Microsoft TLS RSA Root G2 certificate, before reaching
DigiCert Global Root G2.

coderd did not bundle the new G2 OCSP intermediates or the
cross-signed Microsoft TLS RSA Root G2 bridge certificate, so it could
fail to build a trusted chain for affected IMDS signatures.

Related to:
https://linear.app/codercom/issue/PLAT-205/bug-azure-instance-identity-verification-is-broken

2026-05-13 09:07:44 -07:00

..

azureidentity_internal_test.go

fix(coderd): harden Azure identity certificate fetch (#25274)

2026-05-13 12:51:44 +02:00

azureidentity_test.go

fix: verify PKCS7 signature on Azure instance identity tokens (#25286)

2026-05-13 14:14:07 +00:00

azureidentity.go

fix(coderd/azureidentity): add Azure IMDS G2 chain certificates (#25243)

2026-05-13 09:07:44 -07:00

generate.sh

fix(coderd/azureidentity): add Azure IMDS G2 chain certificates (#25243)

2026-05-13 09:07:44 -07:00