mirror of
https://github.com/intel/linux-sgx
synced 2026-06-08 14:49:32 +00:00
Li, Xun
9fafc27e8f
Upgraded to OpenSSL 3.0.14. Upgraded Intel(R) Integrated Performance Primitives (IPP) Cryptography library to version 2021.12.1. Supported FIPS 140-3 Certifiable IPP Crypto based Trusted Library. Upgraded Intel SGX Architecture Enclaves based on new IPP crypto library. Upgraded Intel DCAP Quote Verification Enclave to integrate OpenSSL/SgxSSL 3.0.14. Removed Intel DCAP PCCS from repository. Added Ubuntu* 24.04 LTS 64-bit Server support. Fixed bug. Note that PCCS is not available from this release. Please follow DCAP installation guide to use `PCCSAdminTool` to retrieve the attestation collaterals or use old version PCCS. Signed-off-by: Li, Xun <xun.li@intel.com>
176 lines
6.0 KiB
Makefile
176 lines
6.0 KiB
Makefile
#
|
|
# Copyright (C) 2011-2021 Intel Corporation. All rights reserved.
|
|
#
|
|
# Redistribution and use in source and binary forms, with or without
|
|
# modification, are permitted provided that the following conditions
|
|
# are met:
|
|
#
|
|
# * Redistributions of source code must retain the above copyright
|
|
# notice, this list of conditions and the following disclaimer.
|
|
# * Redistributions in binary form must reproduce the above copyright
|
|
# notice, this list of conditions and the following disclaimer in
|
|
# the documentation and/or other materials provided with the
|
|
# distribution.
|
|
# * Neither the name of Intel Corporation nor the names of its
|
|
# contributors may be used to endorse or promote products derived
|
|
# from this software without specific prior written permission.
|
|
#
|
|
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
|
# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
|
# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
|
|
# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
|
|
# OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
|
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
|
|
# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
|
|
# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
|
|
# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
|
# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
|
# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
#
|
|
#
|
|
|
|
include ../../../buildenv.mk
|
|
|
|
ifndef DEBUG
|
|
CXXFLAGS += -DDISABLE_TRACE
|
|
CFLAGS += -DDISABLE_TRACE
|
|
endif
|
|
|
|
CXXFLAGS += -fPIC -Werror -g
|
|
CXXFLAGS += $(ADDED_INC)
|
|
|
|
CFLAGS += -fPIC -Werror -g
|
|
CFLAGS += $(ADDED_INC)
|
|
|
|
VTUNE_DIR = $(LINUX_EXTERNAL_DIR)/vtune/linux
|
|
PREBUILT_OPENSSL_DIR := $(LINUX_EXTERNAL_DIR)/dcap_source/prebuilt/openssl
|
|
CRYPTO_LIB := -L$(PREBUILT_OPENSSL_DIR)/lib/linux64 -lcrypto
|
|
|
|
INC += -I$(SGX_HEADER_DIR) \
|
|
-I$(COMMON_DIR)/inc/internal \
|
|
-I$(COMMON_DIR)/inc/internal/linux \
|
|
-I$(LINUX_PSW_DIR)/enclave_common \
|
|
-I$(LINUX_PSW_DIR)/urts/ \
|
|
-I$(LINUX_PSW_DIR)/urts/linux \
|
|
-I$(LINUX_PSW_DIR)/urts/parser \
|
|
-I$(VTUNE_DIR)/include \
|
|
-I$(VTUNE_DIR)/sdk/src/ittnotify \
|
|
-I$(PREBUILT_OPENSSL_DIR)/inc
|
|
|
|
LDFLAGS := -lwrapper
|
|
INTERNAL_LDFLAGS := -lwrapper
|
|
LDFLAGS += $(COMMON_LDFLAGS) -Wl,-Bdynamic -L$(BUILD_DIR) -lsgx_enclave_common -lpthread
|
|
INTERNAL_LDFLAGS += $(COMMON_LDFLAGS) -lpthread
|
|
LDFLAGS += -L$(VTUNE_DIR)/sdk/src/ittnotify -littnotify -ldl $(CRYPTO_LIB)
|
|
INTERNAL_LDFLAGS += -L$(VTUNE_DIR)/sdk/src/ittnotify -littnotify -ldl $(CRYPTO_LIB)
|
|
LDFLAGS += -Wl,--version-script=urts.lds -Wl,--gc-sections
|
|
INTERNAL_LDFLAGS += -Wl,--version-script=urts_internal.lds -Wl,--gc-sections
|
|
|
|
DIR1 := $(LINUX_PSW_DIR)/urts/linux
|
|
DIR2 := $(LINUX_PSW_DIR)/urts
|
|
DIR3 := $(LINUX_PSW_DIR)/urts/parser
|
|
DIR4 := $(LINUX_PSW_DIR)/urts/parser/linux
|
|
DIR5 := $(LINUX_PSW_DIR)/../common/src/linux
|
|
DIR6 := $(LINUX_PSW_DIR)/../common/src
|
|
|
|
LIB += -L$(COMMON_DIR)/se_wrapper_psw \
|
|
-L$(SGX_LIB_DIR)
|
|
|
|
OBJ1 := loader.o \
|
|
node.o \
|
|
se_detect.o \
|
|
enclave.o \
|
|
tcs.o \
|
|
enclave_mutex.o \
|
|
enclave_thread.o \
|
|
routine.o \
|
|
urts_xsave.o \
|
|
se_ocalls.o \
|
|
cpu_features.o \
|
|
cpu_features_ext.o \
|
|
launch_checker.o \
|
|
urts_version.o \
|
|
enclave_creator_hw_com.o
|
|
|
|
OBJ2 := urts.o \
|
|
enclave_creator_hw.o \
|
|
misc.o \
|
|
sig_handler.o \
|
|
debugger_support.o \
|
|
get_thread_id.o \
|
|
prd_css_util.o \
|
|
urts_emm.o \
|
|
edmm_utility.o
|
|
|
|
OBJ3 := enter_enclave.o \
|
|
xsave_gnu.o
|
|
|
|
OBJ4 := section.o \
|
|
elfparser.o
|
|
|
|
OBJ5 := urts_internal.o
|
|
|
|
OBJ6 := crypto_evp_digest.o crypto_rsa_key.o crypto_rsa3072.o
|
|
|
|
CPP_OBJ := $(OBJ1) $(OBJ2) $(OBJ4) $(OBJ5) $(OBJ6)
|
|
URTS_OBJ := $(OBJ3) $(OBJ1) $(OBJ2) $(OBJ4) $(OBJ6)
|
|
INTERNAL_OBJ := $(OBJ3) $(CPP_OBJ)
|
|
|
|
|
|
vpath %.cpp $(DIR1):$(DIR2):$(DIR3):$(DIR4):$(DIR6)
|
|
vpath %.S $(DIR1):$(DIR5)
|
|
|
|
LIBWRAPPER := libwrapper.a
|
|
LIBSGX_ENCLAVE_COMMON := libsgx_enclave_common.a
|
|
LIBURTS_INTERNAL := liburts_internal.so
|
|
LIBURTS := libsgx_urts.so
|
|
LIBURTS_FULL := $(LIBURTS).$(call get_full_version,URTS_VERSION)
|
|
LIBURTS_MAJOR := $(LIBURTS).$(call get_major_version,URTS_VERSION)
|
|
|
|
.PHONY: all
|
|
all: $(LIBURTS) $(LIBURTS_INTERNAL) | $(BUILD_DIR)
|
|
@$(CP) $(LIBURTS) $|/$(LIBURTS_FULL)
|
|
@$(LN) $(LIBURTS_FULL) $|/$(LIBURTS_MAJOR)
|
|
@$(LN) $(LIBURTS_MAJOR) $|/$(LIBURTS)
|
|
@$(CP) $(LIBURTS_INTERNAL) $|
|
|
|
|
$(LIBURTS_INTERNAL): $(INTERNAL_OBJ) $(LIBWRAPPER) $(LIBSGX_ENCLAVE_COMMON) ittnotify
|
|
@$(MKDIR) $(BUILD_DIR)/.sgx_enclave_common
|
|
$(AR) x $(BUILD_DIR)/$(LIBSGX_ENCLAVE_COMMON) --output $(BUILD_DIR)/.sgx_enclave_common && \
|
|
$(RM) $(BUILD_DIR)/.sgx_enclave_common/edmm_utility.o
|
|
$(CXX) $(CXXFLAGS) -shared -Wl,-soname=$@ $(LIB) -o $@ $(INTERNAL_OBJ) $(BUILD_DIR)/.sgx_enclave_common/*.o $(INTERNAL_LDFLAGS)
|
|
@$(RM) -r $(BUILD_DIR)/.sgx_enclave_common
|
|
|
|
$(LIBURTS): $(URTS_OBJ) $(LIBWRAPPER) $(LIBSGX_ENCLAVE_COMMON) ittnotify
|
|
$(CXX) $(CXXFLAGS) -shared -Wl,-soname=$(LIBURTS_MAJOR) $(LIB) -o $@ $(URTS_OBJ) $(LDFLAGS)
|
|
|
|
$(CPP_OBJ): %.o: %.cpp
|
|
$(CXX) -c $(CXXFLAGS) $(INC) $< -o $@
|
|
|
|
$(OBJ3): %.o: %.S
|
|
$(CC) -c $(CFLAGS) $(INC) $< -o $@
|
|
|
|
$(LIBWRAPPER):
|
|
$(MAKE) -C $(COMMON_DIR)/se_wrapper_psw/
|
|
|
|
$(LIBSGX_ENCLAVE_COMMON):
|
|
$(MAKE) -C $(LINUX_PSW_DIR)/enclave_common/
|
|
|
|
.PHONY: ittnotify
|
|
ittnotify:
|
|
CFLAGS= CXXFLAGS= $(MAKE) -C $(VTUNE_DIR)/sdk/src/ittnotify
|
|
|
|
$(BUILD_DIR):
|
|
@$(MKDIR) $@
|
|
|
|
.PHONY: clean
|
|
clean::
|
|
@$(RM) *.o $(LIBURTS) $(LIBURTS_INTERNAL) \
|
|
$(BUILD_DIR)/$(LIBURTS) \
|
|
$(BUILD_DIR)/$(LIBURTS_FULL) \
|
|
$(BUILD_DIR)/$(LIBURTS_MAJOR) \
|
|
$(BUILD_DIR)/$(LIBURTS_INTERNAL)
|
|
$(MAKE) -C $(COMMON_DIR)/se_wrapper_psw/ clean
|
|
$(MAKE) -C $(LINUX_PSW_DIR)/enclave_common/ clean
|
|
$(MAKE) -C $(VTUNE_DIR)/sdk/src/ittnotify clean
|