Struct RaTlsAttestationClient 

pub struct RaTlsAttestationClient { /* private fields */ }

Client for verifying TEE attestation via RA-TLS handshake.

Connects to the guest’s RA-TLS attestation server over Unix socket, performs a TLS handshake with a custom certificate verifier that extracts and verifies the SNP report from the server’s certificate.

Attestation verification happens during the TLS handshake — if the handshake succeeds, the TEE is verified.

Implementations

impl RaTlsAttestationClient

pub fn new(socket_path: &Path) -> Self

Create a new RA-TLS attestation client for the given socket path.

pub fn socket_path(&self) -> &Path

Get the socket path.

pub async fn verify( &self, policy: AttestationPolicy, allow_simulated: bool, ) -> Result<VerificationResult>

Verify TEE attestation via RA-TLS handshake.

Connects to the guest attestation server, performs a TLS handshake with a custom verifier that checks the SNP report embedded in the server’s certificate, and returns the verification result.

Arguments

• policy - Attestation policy to verify against
• allow_simulated - Whether to accept simulated (non-hardware) reports

pub async fn fetch_report( &self, allow_simulated: bool, ) -> Result<AttestationReport>

Fetch the raw attestation report over RA-TLS, without applying a verification policy.

The guest attestation server speaks RA-TLS + framed messages (not plain HTTP); the signed report is carried in the server’s TLS certificate and is extracted here after the handshake.

Trait Implementations

impl Debug for RaTlsAttestationClient

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.