Dependencies updated to be backward compatible with already supported OSes and also support 26.04
---------
Signed-off-by: Krzysztof Sandowicz <krzysztof.sandowicz@intel.com>
Updates the `dcap_source` submodule to point to a newer commit, advancing the submodule reference from `d20287a` to `a82678d`
---------
Signed-off-by: Maciej Bialaszewski <maciej.bialaszewski@intel.com>
Bumped OpenSSL version from 3.0.17 to 3.0.19
Updated Intel SGX SSL archive version from 3.0_Rev5.1 to 3.0_Rev5.2
Updated corresponding SHA256 checksums for both downloads
---------
Signed-off-by: Juan Del Cuvillo <juan.b.del.cuvillo@intel.com>
The Makefile in `external/cbor` has a conditional logic (per comment: CentOS-specific),
which is attempting to move output subdirectory (`(...)/lib`) to a 64-bit-specific one (`(...)/lib64`).
In case the target exists, a stomp was attempted (and prevented due to non-forceful `mv` use).
This workaround is appending to destination instead.
---------
Signed-off-by: Mateusz Bronk <mateusz.bronk@intel.com>
Updates the `dcap_source` submodule to a newer commit, advancing it from `a9211bc` to `f4d29a6`
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Updated the dcap_source submodule from commit `2268092b9f4ee0a622c63e5301ed31f1de23d11f` to commit `a9211bc5a003c0ba2e40e12b352033d88c390c37`
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Updated copyright year from 2025 to 2026 in RPM spec files
Bumped libsgx-pce-logic and libsgx-qe3-logic minimum version requirements from 1.24 to 1.25
Updated repository homepage URL in Debian control file
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Removed reference Launch Enclave implementation and related tools
Removed Launch Enclave service bundle from AESM
Updated build system to remove LE-related compilation flags and targets
Removed LE-related packages from installer scripts
---------
Signed-off-by: Krzysztof1 Wisniewski <krzysztof1.wisniewski@intel.com>
Updated the dcap_source submodule commit reference from `0b542898617ead49352579d5a01a3b9896be5858` to `869fee6b6cbef3abd9f0f865f2cb8176f42c51d9`
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Updated the dcap_source submodule commit reference from `211ac0355051490aead80029aa463e73d7a1602c` to `0b542898617ead49352579d5a01a3b9896be5858`
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Added a new patch file `0001-fix-to-make-SGX-Linux-build-on-GCC14.patch` that undefines `__AVX__` in Abseil's CRC internal header
Updated build scripts to apply the new patch during the protobuf build process
Reformatted long command chains in Makefiles for better readability
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
libcxxrt library wasn't updated for a long time. CentOS 10 introduced a new version of gcc and g++ compilers which are more strict than compilers in CentOS 9 and earlier. Because of that, a build of cpprt module (which contains source code of libcxxrt) was failing. Now libcxxrt module was extracted from cpprt module to sgx/external/ directory and its sources (in the latest version) are cloned directly from the external Github repository. It required a few adjustments to build cpprt module successfully on Linux distros.
---------
Signed-off-by: Lukasz Kalica <lukasz.kalica@intel.com>
Removed:
- Support for EPID based Attestation. Including Remote Attestation. (sgx_uae_epid.h, sgx_key_exchange.h)
- Support for Quote version 1 and 2
---------
Signed-off-by: Lukasz Juzwiuk <lukasz.a.juzwiuk@intel.com>
Updates the `dcap_source` submodule to a version with new project structure
---------
Signed-off-by: Sebastian Przystawski <sebastian.przystawski@intel.com>
Updated include paths to use the new directory structure
Updated installer BOM files to reflect the new path
---------
Signed-off-by: Sebastian Przystawski <sebastian.przystawski@intel.com>
- Updates the DCAP submodule to incorporate a PCCS fix that addresses how PCK certificates are handled when being inserted into TCB buckets
- Changes QVL repository name in submodules list to the new one
- Copyright headers dates corrected
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Introduces a new patch file to bump protobuf Go dependency to v1.33.0
Updates Makefile targets to apply the new patch during build preparation
Integrates the patch application into both external/protobuf and root Makefile workflows
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Signed-off-by: Krzysztof Sandowicz <krzysztof.sandowicz@intel.com>
- Updates the version number for DCAP components.
- Updates the license file for PCKCertSelection to Intel Simplified.
- Updates the supported operating systems list across multiple README files.
- Fixes the Quote Verification Sample to support both Windows and Linux.
- Bumps PCCS dependency validator.js from 13.15.20 to 13.15.23.
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Updated the dcap_source submodule commit hash from `ed7a99c3355922e3de3950d5c298af734a5474f8` to `1d096c725b1e6e7614d91f8b1b4393b333c719e2`
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Updates the DCAP (Data Center Attestation Primitives) subproject to a new version that includes QVE (Quote Verification Enclave) updates
---------
Signed-off-by: Krzysztof1 Wisniewski <krzysztof1.wisniewski@intel.com>
Updates the DCAP (Data Center Attestation Primitives) submodule to a newer commit, incorporating the latest PCCS (Provisioning Certificate Caching Service) and upstream changes
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Removed the `#undef __AVX__` line from the SGX-specific preprocessor block in the Abseil patch.
Change needs to be reintroduced in a different manner not impacting upgrades from 2.26 to 2.27 version
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Updated the dcap_source submodule commit reference from `838f26f690ab550ece234faa19c5b1a9b9e84284` to `8b78014ba7e5a0a2beeafb24a13bc903dbb3d640`
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Updates the DCAP submodule commit hash from `3ccb75837871e6685138ec1d3224e55de7bb0bd3` to `838f26f690ab550ece234faa19c5b1a9b9e84284`
---------
Signed-off-by: Krzysztof Sandowicz <krzysztof.sandowicz@intel.com>
Switches OpenSSL from version 3.1.6 to 3.0.17 (and from 3.0.13 to 3.0.17 in sample code)
Updates SGXSSL from 3.1.6_Rev1 to 3.0_Rev5 (that runs on OpenSSL 3.0.17)
Updates the dcap_source subproject commit reference to the one relying on OpenSSL 3.0.17 and SGXSSL 3.0_Rev5
---------
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Follow-up of upstream DCAP repo change which added `{deb|rpm}_pccs_admin_tool_pkg` make targets.
Adds corresponding build targets to the top-level `Makefile` (the package is now included in the "local repo" archive).
---------
Signed-off-by: Mateusz Bronk <mateusz.bronk@intel.com>
Follow-up of upstream DCAP repo change which added `intel-tee-pcs-client-tool-*{.deb|.rpm}` packages.
Adds corresponding build targets to the top-level `Makefile` (the package is now included in the "local repo" archive).
---------
Signed-off-by: Mateusz Bronk <mateusz.bronk@intel.com>
Updates the DCAP submodule to a new commit after separating PCCS Admin Tool (into PCCS Admin Tool and PCS Client Tool), moving PCCS related files to a new repository and linking that repository to DCAP repo via submodule.
---------
Signed-off-by: Pawel Krzysztof Blajer <pawel.krzysztof.blajer@intel.com>
* Bumped C++ standard from 14 to 17 in the CMake configuration
* Updated DCAP source submodule to a newer commit with -lpthread flag for GTEST
---------
Signed-off-by: GracjanX Klodkowski <gracjanx.klodkowski@intel.com>
In recent changes to DCAP submodule PCCS paths have been changed. This PR updates to newest submodule and adjusts paths.
---------
Signed-off-by: Pawel Krzysztof Blajer <pawel.krzysztof.blajer@intel.com>
Signed-off-by: Bartosz Gotowalski <bartosz.gotowalski@intel.com>
Adds a cross-platform filename extraction macro that works with both Unix and Windows path separators
Updates production logging to use the cleaner filename format instead of full file paths
Updates the dcap_source submodule to a newer commit
---------
Signed-off-by: Krzysztof Sandowicz <krzysztof.sandowicz@intel.com>
Krzysztof Sandowicz