Updates for SGX 2.16 reproducible build.

Signed-off-by: Zhang Lili <lili.z.zhang@intel.com>
2026-06-08 14:49:32 +00:00 · 2022-04-06 22:29:26 +08:00
parent 1d4f1411c5
commit 0f61c27a40
217 changed files with 12004 additions and 353 deletions
@@ -0,0 +1,234 @@
+/**
+*
+* MIT License
+*
+* Copyright (c) Open Enclave SDK contributors.
+*
+* Permission is hereby granted, free of charge, to any person obtaining a copy
+* of this software and associated documentation files (the "Software"), to deal
+* in the Software without restriction, including without limitation the rights
+* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+* copies of the Software, and to permit persons to whom the Software is
+* furnished to do so, subject to the following conditions:
+*
+* The above copyright notice and this permission notice shall be included in all
+* copies or substantial portions of the Software.
+*
+* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+* SOFTWARE
+*
+*/
+
+#include "sgx_urts.h"
+#include <stdio.h>
+#include "tls_server_u.h"
+
+#define LOOP_OPTION "-server-in-loop"
+/* Global EID shared by multiple threads */
+sgx_enclave_id_t server_global_eid = 0;
+
+
+typedef struct _sgx_errlist_t {
+    sgx_status_t err;
+    const char *msg;
+    const char *sug; /* Suggestion */
+} sgx_errlist_t;
+
+/* Error code returned by sgx_create_enclave */
+static sgx_errlist_t sgx_errlist[] = {
+    {
+        SGX_ERROR_UNEXPECTED,
+        "Unexpected error occurred.",
+        NULL
+    },
+    {
+        SGX_ERROR_INVALID_PARAMETER,
+        "Invalid parameter.",
+        NULL
+    },
+    {
+        SGX_ERROR_OUT_OF_MEMORY,
+        "Out of memory.",
+        NULL
+    },
+    {
+        SGX_ERROR_ENCLAVE_LOST,
+        "Power transition occurred.",
+        "Please refer to the sample \"PowerTransition\" for details."
+    },
+    {
+        SGX_ERROR_INVALID_ENCLAVE,
+        "Invalid enclave image.",
+        NULL
+    },
+    {
+        SGX_ERROR_INVALID_ENCLAVE_ID,
+        "Invalid enclave identification.",
+        NULL
+    },
+    {
+        SGX_ERROR_INVALID_SIGNATURE,
+        "Invalid enclave signature.",
+        NULL
+    },
+    {
+        SGX_ERROR_OUT_OF_EPC,
+        "Out of EPC memory.",
+        NULL
+    },
+    {
+        SGX_ERROR_NO_DEVICE,
+        "Invalid SGX device.",
+        "Please make sure SGX module is enabled in the BIOS, and install SGX driver afterwards."
+    },
+    {
+        SGX_ERROR_MEMORY_MAP_CONFLICT,
+        "Memory map conflicted.",
+        NULL
+    },
+    {
+        SGX_ERROR_INVALID_METADATA,
+        "Invalid enclave metadata.",
+        NULL
+    },
+    {
+        SGX_ERROR_DEVICE_BUSY,
+        "SGX device was busy.",
+        NULL
+    },
+    {
+        SGX_ERROR_INVALID_VERSION,
+        "Enclave version was invalid.",
+        NULL
+    },
+    {
+        SGX_ERROR_INVALID_ATTRIBUTE,
+        "Enclave was not authorized.",
+        NULL
+    },
+    {
+        SGX_ERROR_ENCLAVE_FILE_ACCESS,
+        "Can't open enclave file.",
+        NULL
+    },
+};
+
+/* Check error conditions for loading enclave */
+void print_error_message(sgx_status_t ret)
+{
+    size_t idx = 0;
+    size_t ttl = sizeof sgx_errlist/sizeof sgx_errlist[0];
+
+    for (idx = 0; idx < ttl; idx++) {
+        if(ret == sgx_errlist[idx].err) {
+            if(NULL != sgx_errlist[idx].sug)
+                printf("Info: %s\n", sgx_errlist[idx].sug);
+            printf("Error: %s\n", sgx_errlist[idx].msg);
+            break;
+        }
+    }
+
+    if (idx == ttl)
+        printf("Error code is 0x%X. Please refer to the \"Intel SGX SDK Developer Reference\" for more details.\n", ret);
+}
+
+sgx_status_t initialize_enclave(const char *enclave_path)
+{
+    sgx_status_t ret = SGX_ERROR_UNEXPECTED;
+
+	// the 1st parameter should be SERVER_ENCLAVE_FILENAME
+	ret = sgx_create_enclave(enclave_path, SGX_DEBUG_FLAG, NULL, NULL,
+				&server_global_eid, NULL);
+
+	printf("Server Enc: Enclave library %s\n", enclave_path);
+
+    if (ret != SGX_SUCCESS)
+    {
+        print_error_message(ret);
+		return ret;
+	}
+    return ret;
+}
+
+void terminate_enclave()
+{
+    sgx_destroy_enclave(server_global_eid);
+    printf("Host: Enclave successfully terminated.\n");
+}
+
+int main(int argc, const char* argv[])
+{
+    sgx_status_t result = SGX_SUCCESS;
+    int ret = 1;
+    char* server_port = NULL;
+    int keep_server_up = 0; // should be bool type, 0 false, 1 true
+
+    /* Check argument count */
+    if (argc != 3)
+    {
+        if (argc == 4)
+        {
+            if (strcmp(argv[3], LOOP_OPTION) != 0)
+            {
+                goto print_usage;
+            }
+            else
+            {
+                keep_server_up = 1;
+                goto read_port;
+            }
+        }
+    print_usage:
+        printf(
+            "Usage: %s TLS_SERVER_ENCLAVE_PATH -port:<port> [%s]\n",
+            argv[0],
+            LOOP_OPTION);
+        return 1;
+    }
+
+read_port:
+    // read port parameter
+    {
+        char* option = (char*)"-port:";
+        size_t param_len = 0;
+        param_len = strlen(option);
+        if (strncmp(argv[2], option, param_len) == 0)
+        {
+            server_port = (char*)(argv[2] + param_len);
+        }
+        else
+        {
+            fprintf(stderr, "Unknown option %s\n", argv[2]);
+            goto print_usage;
+        }
+    }
+    printf("server port = %s\n", server_port);
+
+    printf("Host: Creating an tls server enclave\n");
+    result = initialize_enclave(argv[1]);
+    if (result != SGX_SUCCESS)
+    {
+        goto exit;
+    }
+
+    printf("Host: calling setup_tls_server\n");
+    result = set_up_tls_server(server_global_eid, &ret, server_port, keep_server_up);
+    if (ret != 0)
+    {
+        printf("Host: setup_tls_server failed\n");
+        goto exit;
+    }
+
+exit:
+
+    printf("Host: Terminating enclaves\n");
+    terminate_enclave();
+
+    printf("Host:  %s \n", (ret == 0) ? "succeeded" : "failed");
+    return ret;
+}