Commit Graph

324 Commits

Author SHA1 Message Date
Haitao Huang 32169592d0 Changes for kernel sgx patch V29
Signed-off-by: Haitao Huang <4699115+haitaohuang@users.noreply.github.com>
2020-05-09 12:38:13 -05:00
Li Xun 4bb545cde0 Merge pull request #516 from beviko/bugfix-local-attestation-example
Fixes buggy replay protection counter in local attestation example.
2020-04-22 14:13:23 +08:00
Andy Zhao ff71da6187 Merge pull request #525 from jbdelcuv/docker_build
Can't build SGX SDK with the current dockerfile
2020-04-13 10:33:05 +08:00
Li Xun 2e3bbb63d1 Merge pull request #522 from dcmiddle/update-sgxlibs-uaesplit
Update SDK installer to provide sim libs
2020-04-10 10:01:09 +08:00
Juan del Cuvillo 13004889d8 Change the make target to build the SDK with no mitigation to avoid having to install the binutils package that contains the updated assembler. 2020-04-09 17:45:01 -04:00
lzha101 63d037791c Update prepare_sgxssl.sh
Update OpenSSL package url.

Signed-off-by: Zhang Lili Z <lili.z.zhang@intel.com>
sgx_2.9.1
2020-04-09 16:54:42 +08:00
Li, Xun da2a5bba7d Update submodule external/dnnl and external/openmp
Signed-off-by: Li, Xun <xun.li@intel.com>
2020-04-09 15:41:48 +08:00
Li, Xun 1eaa4551d4 Linux 2.9.1 Open Source Gold Release
Supported to query Intel(R) SGX attestation key ID list.
Fixed bugwqs.

Signed-off-by: Li, Xun <xun.li@intel.com>
2020-04-09 14:45:01 +08:00
lzha101 1a65d74374 Merge pull request #506 from lkatalin/python-fix
Change 'is not' to '!=' in gdb_sgx_plugin.py

Signed-off-by: Zhang Lili Z <lili.z.zhang@intel.com>
2020-04-09 08:45:39 +08:00
Lily S 735624409e Change 'is not' to '!=' in gdb_sgx_plugin.py
Signed-off-by: Lily Sturmann <lsturman@redhat.com>
2020-04-08 15:55:18 -04:00
lzha101 78135a5786 Update prepare_sgxssl.sh
Update OpenSSL package url.

Signed-off-by: Zhang Lili Z <lili.z.zhang@intel.com>
2020-04-08 15:44:08 +08:00
Dan Middleton d5e2718e23 Update SDK installer to provide sim libs
Simulation libraries are provided through the SDK installation into
the sdk_libs directory and the environment file adds that directory to
LD_LIBRARY_PATH. Starting in version 2.8 new simulation libraries were
introduced but not added to this path.

This commit adds libsgx_quote_ex_sim.so, libsgx_epid_sim.so, and
libsgx_launch_sim.so to the expected directory.

Without this change applications following the conventions of the sample
Makefiles may build but fail to execute.

Signed-off-by: Dan Middleton <dan.middleton@intel.com>
2020-04-06 15:22:49 -05:00
Li Xun a2b90e326d Merge pull request #512 from ipuustin/aesmd-service
config: aesmd.service support for new device files
2020-03-27 16:40:58 +08:00
volcano bdb8a6aa7b set pthread_info_tls.m_state = SGX_PTHREAD_EXIT after (#488)
pthread_thread_run() returns

Signed-off-by: volcano <volcano_dr@163.com>
2020-03-27 16:06:13 +08:00
Benedikt Kopf 8174f92412 Fixes buggy replay protection counter in local attestation example.
Signed-off-by: Benedikt Kopf <benedikt.kopf@tum.de>
2020-03-25 17:23:29 +01:00
Ismo Puustinen b460a4b2e5 config: aesmd.service support for the new device files.
The current upstream candidate driver users /dev/sgx/enclave and
/dev/sgx/provision files. Add the device files to aesmd systemd service
file so that they can be accessed.

Signed-off-by: Ismo Puustinen <ismo.puustinen@intel.com>
2020-03-19 15:15:17 +02:00
Seth Moore 0280f97a07 Fix CPU feature detection on non-Intel CPUs (#474)
Some developers may have workstations that are not Intel
based. These developers should be able to test their enclaves
with the SGX simulation before building real SGX enclaves and
running those enclaves on genuine Intel processors.

By fixing CPU feature detection, developers with non-Intel
workstations can use SGX simulation to develop SGX enclaves.

Signed-off-by: Seth Moore <sethmo@google.com>
2020-03-16 10:10:35 +08:00
Jakub Konka 72402fd9d2 Update Code Samples commands (#505)
This commit updates the commands one should use when verifying that
they've properly built the SDK and/or have the SGX properly set up,
up and running.

It turns out that the executable for the samples is
generated inside a `bin` subdir (located in each sample), and it is
imperative to run the sample directly from that dir as otherwise
one will be greeted with `failed to load enclave`-like error.

Signed-off-by: Jakub Konka <jakub.konka@golem.network>
2020-03-16 10:01:12 +08:00
Li, Xun ded144258d Upate README.md for 2.9 release
Signed-off-by: Li, Xun <xun.li@intel.com>
sgx_2.9
2020-03-11 09:42:25 +08:00
Li, Xun e78301b69f Update SGXSSL script
use latest SGXSSL 2.9 release

Signed-off-by: Li, Xun <xun.li@intel.com>
2020-03-11 09:12:31 +08:00
Li, Xun 4589daddd5 Linux 2.9 Open Source Gold Release
Fixed bugs.

Signed-off-by: Li, Xun <xun.li@intel.com>
2020-03-10 12:47:50 +08:00
Yu Ding e0a51c4974 Fix sgx-gdb throw exceptions on every ocall in Rust-SGX (#489)
* Fix sgx-gdb throw exceptions on every ocall in Rust-SGX

In Rust-SGX environment, `sgx-gdb` always throws exception after ocall:

```
Python Exception <class 'gdb.error'> syntax error in expression, near `)0x7fffffffd840 = 0'.:
```

And the debugger stops immediately. At this time, the debugger is working in `Rust` mode instead of `C` mode:

```
gdb-peda$ set *(uintptr_t *)0x7fffffffd6d0 = 0
syntax error in expression, near `)0x7fffffffd6d0 = 0'.
gdb-peda$ set *(u32)0x7fffffffd6d0 = 0
syntax error in expression, near `0x7fffffffd6d0 = 0'.
gdb-peda$ p sizeof(u32)
$4 = 0x4
gdb-peda$ show language
The current source language is "auto; currently rust".
gdb-peda$ set language c
gdb-peda$ set *(uintptr_t *)0x7fffffffd6d0 = 0
gdb-peda$
```

This PR helps set the language to `c` before execution of essential gdb commands, and rolls back to `auto` afterwards. This would benefit lots of developers who are developing SGX enclaves in other languages.

Signed-off-by: Yu Ding <dingelish@gmail.com>

* Fix
2020-02-21 16:15:31 +08:00
Li Xun 7b9f974482 Merge pull request #493 from lengyijun/patch-1
Update Makefile
2020-02-18 08:47:09 +08:00
lyj 4ec7eab8dd Update Makefile 2020-01-31 16:48:02 +08:00
Zhang Lili Z 9ddec08fb9 Linux 2.8 Open Source Gold Release.
Signed-off-by: Zhang Lili Z <lili.z.zhang@intel.com>
sgx_2.8
2020-01-16 09:56:26 +08:00
Li Xun 5db5a81b82 Merge pull request #480 from llly/remove_dockfile
Remove Dockerfile and README
2019-12-30 14:41:46 +08:00
Li, Xun d8a31d2e5b Remove Dockerfile and README
Signed-off-by: Li, Xun <xun.li@intel.com>
2019-12-30 13:08:28 +08:00
Li Xun 85980eaa15 Merge pull request #477 from sethmoo/sim-ae
Add support for building sim AE
2019-12-19 09:03:38 +08:00
Andy Zhao 06ba101a58 Merge pull request #478 from llly/update_launch_sim
Remove key checking in get_launch_token() of sgx_launch_sim
2019-12-19 08:46:43 +08:00
Li, Xun 58fea2cbe1 Remove key checking in get_launch_token() of sgx_launch_sim
The key is not used to check whether a enclave can get provision key
or not in simulation mode.

Signed-off-by: Li, Xun <xun.li@intel.com>
2019-12-18 13:11:24 +08:00
Seth Moore 3d8c60e5b8 Add support for building sim AE
Fix psw/ae/buildenv.mk so that it uses the sim runtime libraries when
$(SGX_MODE) is not set to "HW". This allows the PCE and QE code paths
to be tested on platforms that do not support flexible launch control.

Add a rule to automatically sign the sim PCE with a test key.

Signed-off-by: Seth Moore <sethmo@google.com>
2019-12-16 09:35:21 -08:00
lzha101 042849cef8 Merge pull request #470 from sethmoo/master
Initialize outputs passed to realpath

Signed-off-by: Zhang Lili Z <lili.z.zhang@intel.com>
2019-11-27 08:48:30 +08:00
Seth Moore 73a64e9e42 Initialize outputs passed to realpath
On error, realpath does not populate the output array. Zero out the
arrays before passing them to realpath.

Signed-off-by: Seth Moore <sethmo@google.com>
2019-11-26 07:46:33 -08:00
Li, Xun d166ff0c80 Linux 2.7.1 Open Source Gold Release
Updated OpenSSL to 1.1.1d.
Fixed bugs.

Signed-off-by: Li, Xun <xun.li@intel.com>
sgx_2.7.1
2019-11-12 13:55:35 +08:00
lzha101 864364db32 Merge pull request #464 from llly/fix_sample_typo
Fix a typo in LocalAttestation sample code

Signed-off-by: Zhang Lili Z <lili.z.zhang@intel.com>
2019-11-04 11:03:27 +08:00
Li, Xun 033054af39 Fix a typo in LocalAttestation sample code
Signed-off-by: Li, Xun <xun.li@intel.com>
2019-11-04 09:08:27 +08:00
Andy Zhao 344abb4b12 Merge pull request #461 from llly/fix_report_attestation_status
Fix sgx_report_attestation_status() and sgx_check_update_status()
2019-10-31 12:50:48 +08:00
Li, Xun 97581758ef Fix sgx_report_attestation_status() and sgx_check_update_status()
Remove the dependency on platform service from epid quote service in aesm_service.

Signed-off-by: Li, Xun <xun.li@intel.com>
2019-10-31 10:35:24 +08:00
Andy Zhao b8c14d1920 Merge pull request #460 from lzha101/fix_build_gcc9
Fix build failure with GCC 9
2019-10-24 13:22:35 +08:00
Zhang Lili Z 52af6661f6 Fix build failure with GCC 9
Signed-off-by: Zhang Lili Z <lili.z.zhang@intel.com>
2019-10-24 20:22:15 +08:00
lzha101 181b56a220 Merge pull request #450 from deeglaze/patch-5
Add missing #include to trts_veh.cpp

Signed-off-by: Zhang Lili Z <lili.z.zhang@intel.com>
2019-10-23 16:53:13 +08:00
lzha101 e240c6150b Merge pull request #455 from deeglaze/elf_error_messages
Add trace messages for elf parser failures

Signed-off-by: Zhang Lili Z <lili.z.zhang@intel.com>
2019-10-23 16:52:54 +08:00
lzha101 52f08f61bb Merge pull request #448 from xiangquanliu/sgx_enclave_crash_error
Fix sample enclave crash error

Signed-off-by: Zhang Lili Z <lili.z.zhang@intel.com>
2019-10-21 17:00:12 +08:00
Zhang Lili Z 504b28053f Update DCAP submodule
Signed-off-by: Zhang Lili Z <lili.z.zhang@intel.com>
sgx_2.7
2019-10-18 02:00:59 +08:00
Zhang Lili Z b13ab0eae7 Linux 2.7 Open Source Gold Release
Changes:
Added a command option “-resign” for Signing Tool.
Split the header file of Un-trusted Architecture Services.
Supported Red Hat* Enterprise Linux* Server 8.0 (for x86_64). And we do not support
Red Hat* Enterprise Linux* Server 7.6 (for x86_64) from this release
Added support for new version Intel(R) Provisioning Certification Server interfaces.
Added new libraries libsgx_epid.so, libsgx_launch.so, libsgx_platform.so and libsgx_quote_ex.so
Fixed bugs.

Signed-off-by: Zhang Lili Z <lili.z.zhang@intel.com>
2019-10-18 00:16:40 +08:00
Dionna Glaze 898853bd97 Add trace messages for elf parser failures
These messages are useful for toolchain debugging.

Signed-off-by: Dionna Glaze <dionnaglaze@google.com>
2019-10-10 08:59:23 -07:00
Dionna Amalie Glaze 5bb8bd7738 Add missing #include to trts_veh.cpp
The ce_cdefs header defines SE_64, which this source file depends on.
When building with clang, this missing header causes the build to break.

Signed-off-by: Dionna Glaze <drdeeglaze@gmail.com>
2019-10-01 13:53:52 -07:00
xiangqua feb9d6c36c Fix sample enclave crash error
Signed-off-by: xiangqua <xiangquan.liu@intel.com>
2019-09-27 15:10:13 +08:00
Li Xun 50d5bec588 Merge pull request #385 from pdxjohnny/remote_attestation_readme
Remote Attestation sample update README
2019-08-14 11:23:38 +08:00
Andy Zhao 7ba318fcf2 Merge pull request #432 from deeglaze/weak_alias_guard
Guard weak_alias definition with ifndef
2019-08-14 09:41:16 +08:00