Why SPDM responder read the requester certificate chain directly in negotiate state ?

[owen126315]

spdm-emu/spdm_emu/spdm_responder_emu/spdm_responder_spdm.c

Lines 446 to 461 in 3630f47

	res = libspdm_read_requester_root_public_certificate(
	m_use_hash_algo, m_use_req_asym_algo, &data,
	&data_size, &hash, &hash_size);
	libspdm_x509_get_cert_from_cert_chain(
	(uint8_t *)data + sizeof(spdm_cert_chain_t) + hash_size,
	data_size - sizeof(spdm_cert_chain_t) - hash_size, 0,
	&root_cert, &root_cert_size);
	if (res) {
	libspdm_zero_mem(&parameter, sizeof(parameter));
	parameter.location = LIBSPDM_DATA_LOCATION_LOCAL;
	libspdm_set_data(
	spdm_context,
	LIBSPDM_DATA_PEER_PUBLIC_ROOT_CERT,
	&parameter, (void *)root_cert, root_cert_size);
	/* Do not free it.*/
	}

Should the responder get the requester certificate chain through mutual authentication, instead of file read it directly?

[jyao1]

Read local == provision.
Read peer == runtime check.