Cherry-pick #7233 to 6.x LTS (#7235)

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: cjen1-msft <chrisjensen@microsoft.com>

Author: Copilot

CHANGELOG.md

@@ -5,6 +5,14 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
+## [6.0.12]
+
+[6.0.12]: https://github.com/microsoft/CCF/releases/tag/ccf-6.0.12
+
+### Fixed
+
+- Correctly validate the full AMD ASK endorsement chain (#7233)
+
 ## [6.0.11]
 
 [6.0.11]: https://github.com/microsoft/CCF/releases/tag/ccf-6.0.11

include/ccf/pal/attestation.h

@@ -159,7 +159,7 @@ namespace ccf::pal
 
     auto chip_cert_verifier = ccf::crypto::make_verifier(chip_certificate);
     if (!chip_cert_verifier->verify_certificate(
-          {&root_certificate, &sev_version_certificate}))
+          {&root_certificate}, {&sev_version_certificate}))
     {
       throw std::logic_error(
         "SEV-SNP: The chain of signatures from the root of trust to this "

python/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "ccf"
-version = "6.0.11"
+version = "6.0.12"
 authors = [
   { name="CCF Team", email="CCF-Sec@microsoft.com" },
 ]