ra-tls: Support for app info in RATLS cert

kvinwang · kvinwang · commit c6d1d1baac5d · 2026-01-23T14:52:43.000Z
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -89,6 +89,7 @@ size-parser = { path = "size-parser" }
 
 # Core dependencies
 anyhow = { version = "1.0.97", default-features = false }
+errify = { version = "0.3.0", features = ["anyhow"] }
 or-panic = { version = "1.0", default-features = false }
 chrono = "0.4.40"
 clap = { version = "4.5.32", features = ["derive", "string"] }
@@ -124,6 +125,7 @@ serde = { version = "1.0.228", features = ["derive"], default-features = false }
 serde-human-bytes = "0.1.2"
 serde_json = { version = "1.0.140", default-features = false }
 serde_ini = "0.2.0"
+rmp-serde = "1.3.1"
 toml = "0.8.20"
 toml_edit = { version = "0.22.24", features = ["serde"] }
 yasna = "0.5.2"
diff --git a/dstack-attest/Cargo.toml b/dstack-attest/Cargo.toml
@@ -27,6 +27,7 @@ sha2.workspace = true
 sha3.workspace = true
 tdx-attest.workspace = true
 insta.workspace = true
+errify.workspace = true
 
 [features]
 quote = []
diff --git a/dstack-attest/src/attestation.rs b/dstack-attest/src/attestation.rs
@@ -260,6 +260,13 @@ impl VersionedAttestation {
         }
     }
 
+    /// Get app info
+    pub fn decode_app_info(&self, boottime_mr: bool) -> Result<AppInfo> {
+        match self {
+            Self::V0 { attestation } => attestation.decode_app_info(boottime_mr),
+        }
+    }
+
     /// Strip data for certificate embedding (e.g. keep RTMR3 event logs only).
     pub fn into_stripped(mut self) -> Self {
         let VersionedAttestation::V0 { attestation } = &mut self;
@@ -444,6 +451,7 @@ impl<T: GetDeviceId> Attestation<T> {
         self.decode_app_info_ex(boottime_mr, "")
     }
 
+    #[errify::errify("decode app info")]
     pub fn decode_app_info_ex(&self, boottime_mr: bool, vm_config: &str) -> Result<AppInfo> {
         let key_provider_info = if boottime_mr {
             vec![]
@@ -739,7 +747,7 @@ pub fn validate_tcb(report: &TdxVerifiedReport) -> Result<()> {
 }
 
 /// Information about the app extracted from event log
-#[derive(Debug, Clone, Serialize)]
+#[derive(Debug, Clone, Serialize, Deserialize)]
 pub struct AppInfo {
     /// App ID
     #[serde(with = "hex_bytes")]
diff --git a/dstack-util/src/system_setup.rs b/dstack-util/src/system_setup.rs
@@ -391,7 +391,8 @@ impl<'a> GatewayContext<'a> {
             subject_alt_names: vec![],
             usage_server_auth: false,
             usage_client_auth: true,
-            ext_quote: true,
+            ext_quote: false,
+            ext_app_info: true,
             not_before: None,
             not_after: None,
         };
diff --git a/gateway/src/main.rs b/gateway/src/main.rs
@@ -77,6 +77,7 @@ async fn maybe_gen_certs(config: &Config, tls_config: &TlsConfig) -> Result<()>
                 usage_ra_tls: true,
                 usage_server_auth: true,
                 usage_client_auth: false,
+                with_app_info: false,
                 not_before: None,
                 not_after: None,
             })
diff --git a/gateway/src/main_service/sync_client.rs b/gateway/src/main_service/sync_client.rs
@@ -90,6 +90,7 @@ pub(crate) async fn sync_task(proxy: Proxy) -> Result<()> {
                 usage_ra_tls: false,
                 usage_server_auth: false,
                 usage_client_auth: true,
+                with_app_info: false,
                 not_after: None,
                 not_before: None,
             })
diff --git a/guest-agent/rpc/proto/agent_rpc.proto b/guest-agent/rpc/proto/agent_rpc.proto
@@ -76,6 +76,8 @@ message GetTlsKeyArgs {
   optional uint64 not_before = 6;
   // Certificate validity end time as seconds since UNIX epoch
   optional uint64 not_after = 7;
+  // Includes app info in the certificate
+  bool with_app_info = 8;
 }
 
 // The request to derive a key
diff --git a/guest-agent/src/rpc_service.rs b/guest-agent/src/rpc_service.rs
@@ -85,6 +85,7 @@ impl AppStateInner {
                     usage_server_auth: false,
                     usage_client_auth: true,
                     ext_quote: true,
+                    ext_app_info: false,
                     not_after: None,
                     not_before: None,
                 },
@@ -242,6 +243,7 @@ impl DstackGuestRpc for InternalRpcHandler {
             usage_server_auth: request.usage_server_auth,
             usage_client_auth: request.usage_client_auth,
             ext_quote: request.usage_ra_tls,
+            ext_app_info: request.with_app_info,
             not_after: request.not_after,
             not_before: request.not_before,
         };
@@ -504,6 +506,7 @@ impl TappdRpc for InternalRpcHandlerV0 {
             usage_server_auth: request.usage_server_auth,
             usage_client_auth: request.usage_client_auth,
             ext_quote: request.usage_ra_tls,
+            ext_app_info: false,
             not_before: None,
             not_after: None,
         };
diff --git a/ra-rpc/src/lib.rs b/ra-rpc/src/lib.rs
@@ -8,6 +8,7 @@ use std::{fmt::Display, net::SocketAddr, path::PathBuf};
 
 use anyhow::Result;
 use prpc::{codec::encode_message_to_vec, server::Service as PrpcService};
+use ra_tls::attestation::AppInfo;
 use tracing::{error, info};
 
 pub use ra_tls::attestation::{Attestation, VerifiedAttestation};
@@ -36,6 +37,7 @@ pub struct CallContext<'a, State> {
     pub attestation: Option<VerifiedAttestation>,
     pub remote_endpoint: Option<RemoteEndpoint>,
     pub remote_app_id: Option<Vec<u8>>,
+    pub remote_app_info: Option<AppInfo>,
 }
 
 pub trait RpcCall<State>: Sized {
diff --git a/ra-rpc/src/rocket_helper.rs b/ra-rpc/src/rocket_helper.rs
@@ -291,12 +291,19 @@ pub async fn handle_prpc_impl<S, Call: RpcCall<S>>(
         data,
     } = args;
     let method = method.trim_start_matches(method_trim_prefix.unwrap_or_default());
-    let remote_app_id = request
+    let info = request
         .certificate
         .as_ref()
-        .map(|cert| RocketCertificate(cert).get_app_id())
-        .transpose()?
-        .flatten();
+        .map(|cert| -> Result<_> {
+            let app_id = RocketCertificate(cert).get_app_id()?;
+            let app_info = RocketCertificate(cert).get_app_info()?;
+            Ok((app_id, app_info))
+        })
+        .transpose()?;
+    let (remote_app_id, remote_app_info) = match info {
+        Some((app_id, app_info)) => (app_id, app_info),
+        None => (None, None),
+    };
     let attestation = request
         .certificate
         .as_ref()
@@ -337,6 +344,7 @@ pub async fn handle_prpc_impl<S, Call: RpcCall<S>>(
         attestation,
         remote_endpoint: request.remote_addr.cloned().map(RemoteEndpoint::from),
         remote_app_id,
+        remote_app_info,
     };
     let call = Call::construct(context).context("failed to construct call")?;
     let (status_code, output) = call
diff --git a/ra-tls/Cargo.toml b/ra-tls/Cargo.toml
@@ -39,6 +39,8 @@ dstack-types.workspace = true
 hex_fmt.workspace = true
 ez-hash.workspace = true
 dstack-attest.workspace = true
+errify.workspace = true
+rmp-serde.workspace = true
 
 [features]
 quote = ["dstack-attest/quote"]
diff --git a/ra-tls/src/cert.rs b/ra-tls/src/cert.rs
@@ -24,13 +24,13 @@ use x509_parser::public_key::PublicKey;
 use x509_parser::x509::SubjectPublicKeyInfo;
 
 use crate::oids::{
-    PHALA_RATLS_APP_ID, PHALA_RATLS_ATTESTATION, PHALA_RATLS_CERT_USAGE, PHALA_RATLS_EVENT_LOG,
-    PHALA_RATLS_TDX_QUOTE,
+    PHALA_RATLS_APP_ID, PHALA_RATLS_APP_INFO, PHALA_RATLS_ATTESTATION, PHALA_RATLS_CERT_USAGE,
+    PHALA_RATLS_EVENT_LOG, PHALA_RATLS_TDX_QUOTE,
 };
 use crate::traits::CertExt;
 #[cfg(feature = "quote")]
 use dstack_attest::attestation::QuoteContentType;
-use dstack_attest::attestation::{Attestation, AttestationQuote, VersionedAttestation};
+use dstack_attest::attestation::{AppInfo, Attestation, AttestationQuote, VersionedAttestation};
 
 /// A CA certificate and private key.
 pub struct CaCert {
@@ -88,6 +88,11 @@ impl CaCert {
         let pki = rcgen::SubjectPublicKeyInfo::from_der(&csr.pubkey)
             .context("Failed to parse signature")?;
         let cfg = &csr.config;
+        let app_info = if cfg.ext_app_info {
+            Some(csr.attestation.decode_app_info(false)?)
+        } else {
+            None
+        };
         let attestation = cfg.ext_quote.then_some(&csr.attestation);
         let req = CertRequest::builder()
             .key(&pki)
@@ -98,6 +103,7 @@ impl CaCert {
             .usage_client_auth(cfg.usage_client_auth)
             .maybe_attestation(attestation)
             .maybe_app_id(app_id)
+            .maybe_app_info(app_info.as_ref())
             .special_usage(usage)
             .maybe_not_before(cfg.not_before.map(unix_time_to_system_time))
             .maybe_not_after(cfg.not_after.map(unix_time_to_system_time))
@@ -138,6 +144,8 @@ pub struct CertConfigV2 {
     pub usage_client_auth: bool,
     /// Whether the certificate is quoted.
     pub ext_quote: bool,
+    /// Whether embed app info.
+    pub ext_app_info: bool,
     /// The certificate validity start time as seconds since UNIX epoch.
     pub not_before: Option<u64>,
     /// The certificate validity end time as seconds since UNIX epoch.
@@ -153,6 +161,7 @@ impl From<CertConfig> for CertConfigV2 {
             usage_server_auth: config.usage_server_auth,
             usage_client_auth: config.usage_client_auth,
             ext_quote: config.ext_quote,
+            ext_app_info: false,
             not_before: None,
             not_after: None,
         }
@@ -330,6 +339,7 @@ pub struct CertRequest<'a, Key> {
     alt_names: Option<&'a [String]>,
     ca_level: Option<u8>,
     app_id: Option<&'a [u8]>,
+    app_info: Option<&'a AppInfo>,
     special_usage: Option<&'a str>,
     attestation: Option<&'a VersionedAttestation>,
     not_before: Option<SystemTime>,
@@ -370,6 +380,11 @@ impl<Key> CertRequest<'_, Key> {
         if let Some(app_id) = self.app_id {
             add_ext(&mut params, PHALA_RATLS_APP_ID, app_id);
         }
+        if let Some(app_info) = self.app_info {
+            let app_info_bytes =
+                rmp_serde::to_vec(&app_info).context("Failed to serialize app info")?;
+            add_ext(&mut params, PHALA_RATLS_APP_INFO, app_info_bytes);
+        }
         if let Some(usage) = self.special_usage {
             add_ext(&mut params, PHALA_RATLS_CERT_USAGE, usage);
         }
@@ -673,6 +688,7 @@ mod tests {
                 usage_server_auth: true,
                 usage_client_auth: false,
                 ext_quote: false,
+                ext_app_info: false,
                 not_before: None,
                 not_after: None,
             },
@@ -706,6 +722,7 @@ mod tests {
                 usage_server_auth: true,
                 usage_client_auth: false,
                 ext_quote: true,
+                ext_app_info: false,
                 not_before: None,
                 not_after: None,
             },
diff --git a/ra-tls/src/oids.rs b/ra-tls/src/oids.rs
@@ -14,3 +14,5 @@ pub const PHALA_RATLS_APP_ID: &[u64] = &[1, 3, 6, 1, 4, 1, 62397, 1, 3];
 pub const PHALA_RATLS_CERT_USAGE: &[u64] = &[1, 3, 6, 1, 4, 1, 62397, 1, 4];
 /// OID for dstack attestation (the successor of TDX quote)
 pub const PHALA_RATLS_ATTESTATION: &[u64] = &[1, 3, 6, 1, 4, 1, 62397, 1, 8];
+/// OID for app info
+pub const PHALA_RATLS_APP_INFO: &[u64] = &[1, 3, 6, 1, 4, 1, 62397, 1, 9];
diff --git a/ra-tls/src/traits.rs b/ra-tls/src/traits.rs
@@ -5,14 +5,17 @@
 //! Traits for the crate
 
 use anyhow::{Context, Result};
+use dstack_attest::attestation::AppInfo;
 
-use crate::oids::{PHALA_RATLS_APP_ID, PHALA_RATLS_CERT_USAGE};
+use crate::oids::{PHALA_RATLS_APP_ID, PHALA_RATLS_APP_INFO, PHALA_RATLS_CERT_USAGE};
 
 /// Types that can get custom cert extensions from.
 pub trait CertExt {
     /// Get a cert extension from the type.
     fn get_extension_der(&self, oid: &[u64]) -> Result<Option<Vec<u8>>>;
+
     /// Get externtion bytes
+    #[errify::errify("Failed to get extension for {oid:?}")]
     fn get_extension_bytes(&self, oid: &[u64]) -> Result<Option<Vec<u8>>> {
         let Some(der) = self.get_extension_der(oid)? else {
             return Ok(None);
@@ -23,10 +26,7 @@ pub trait CertExt {
 
     /// Get Certificate Special Usage from the type.
     fn get_special_usage(&self) -> Result<Option<String>> {
-        let Some(found) = self
-            .get_extension_bytes(PHALA_RATLS_CERT_USAGE)
-            .context("Failed to get extension")?
-        else {
+        let Some(found) = self.get_extension_bytes(PHALA_RATLS_CERT_USAGE)? else {
             return Ok(None);
         };
         let found = String::from_utf8(found).context("Failed to decode special usage as utf8")?;
@@ -35,9 +35,16 @@ pub trait CertExt {
 
     /// Get the app id from the certificate
     fn get_app_id(&self) -> Result<Option<Vec<u8>>> {
-        let app_id = self
-            .get_extension_bytes(PHALA_RATLS_APP_ID)
-            .context("Failed to get extension")?;
-        Ok(app_id)
+        self.get_extension_bytes(PHALA_RATLS_APP_ID)
+    }
+
+    /// Get app info
+    fn get_app_info(&self) -> Result<Option<AppInfo>> {
+        let Some(app_info_bytes) = self.get_extension_bytes(PHALA_RATLS_APP_INFO)? else {
+            return Ok(None);
+        };
+        let app_info =
+            rmp_serde::from_slice(&app_info_bytes).context("Failed to decode app info as json")?;
+        Ok(app_info)
     }
 }
diff --git a/sdk/curl/api.md b/sdk/curl/api.md

Original file line number	Diff line number	Diff line change
`@@ -76,6 +76,8 @@ message GetTlsKeyArgs {`
`76`	`76`	`optional uint64 not_before = 6;`
`77`	`77`	`// Certificate validity end time as seconds since UNIX epoch`
`78`	`78`	`optional uint64 not_after = 7;`
	`79`	`+ // Includes app info in the certificate`
	`80`	`+ bool with_app_info = 8;`
`79`	`81`	`}`
`80`	`82`
`81`	`83`	`// The request to derive a key`