When starting an enclave in debug mode, the nitro-cli describe-enclaves command prints out the PCR's the enclave is supposed to have based on image creation, instead of the full 0 values which it has in debug mode. I realize that the full 0 values are mentioned in the official documentation, but the command itself is actively misleading when used on debug mode enclaves.
I suggest adding a check which changes the PCR's to the special full 0 values if a given enclave is in debug mode.
When starting an enclave in debug mode, the
nitro-cli describe-enclavescommand prints out the PCR's the enclave is supposed to have based on image creation, instead of the full 0 values which it has in debug mode. I realize that the full 0 values are mentioned in the official documentation, but the command itself is actively misleading when used on debug mode enclaves.I suggest adding a check which changes the PCR's to the special full 0 values if a given enclave is in debug mode.