mirror of
https://github.com/intel/linux-sgx
synced 2026-06-08 14:49:32 +00:00
Li, Xun
9fafc27e8f
Upgraded to OpenSSL 3.0.14. Upgraded Intel(R) Integrated Performance Primitives (IPP) Cryptography library to version 2021.12.1. Supported FIPS 140-3 Certifiable IPP Crypto based Trusted Library. Upgraded Intel SGX Architecture Enclaves based on new IPP crypto library. Upgraded Intel DCAP Quote Verification Enclave to integrate OpenSSL/SgxSSL 3.0.14. Removed Intel DCAP PCCS from repository. Added Ubuntu* 24.04 LTS 64-bit Server support. Fixed bug. Note that PCCS is not available from this release. Please follow DCAP installation guide to use `PCCSAdminTool` to retrieve the attestation collaterals or use old version PCCS. Signed-off-by: Li, Xun <xun.li@intel.com>
149 lines
5.0 KiB
Makefile
149 lines
5.0 KiB
Makefile
#
|
|
# Copyright (C) 2011-2021 Intel Corporation. All rights reserved.
|
|
#
|
|
# Redistribution and use in source and binary forms, with or without
|
|
# modification, are permitted provided that the following conditions
|
|
# are met:
|
|
#
|
|
# * Redistributions of source code must retain the above copyright
|
|
# notice, this list of conditions and the following disclaimer.
|
|
# * Redistributions in binary form must reproduce the above copyright
|
|
# notice, this list of conditions and the following disclaimer in
|
|
# the documentation and/or other materials provided with the
|
|
# distribution.
|
|
# * Neither the name of Intel Corporation nor the names of its
|
|
# contributors may be used to endorse or promote products derived
|
|
# from this software without specific prior written permission.
|
|
#
|
|
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
|
# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
|
# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
|
|
# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
|
|
# OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
|
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
|
|
# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
|
|
# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
|
|
# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
|
# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
|
# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
#
|
|
#
|
|
|
|
TOP_DIR = ../..
|
|
include $(TOP_DIR)/buildenv.mk
|
|
|
|
TLSNAME = sgx_ttls
|
|
EDLFILE = $(TOP_DIR)/common/inc/$(TLSNAME).edl
|
|
|
|
ifeq ($(DEBUG), 1)
|
|
SGXSSL_TLIB = sgx_tsgxssld
|
|
SGXSSL_TCRYPTO = sgx_tsgxssl_cryptod
|
|
else
|
|
SGXSSL_TLIB = sgx_tsgxssl
|
|
SGXSSL_TCRYPTO = sgx_tsgxssl_crypto
|
|
endif
|
|
|
|
SGX_QV_PATH ?= ../../external/dcap_source/QuoteVerification
|
|
PREBUILT_OPENSSL_PATH ?= $(SGX_QV_PATH)/../prebuilt/openssl
|
|
CBOR_PATH ?= $(LINUX_EXTERNAL_DIR)/cbor
|
|
CBOR_RELATIVE_PATH ?= ../../external/cbor
|
|
|
|
INCLUDE += -I$(COMMON_DIR)/inc/tlibc \
|
|
-I$(COMMON_DIR)/inc/internal \
|
|
-I$(COMMON_DIR)/inc \
|
|
-I$(LINUX_SDK_DIR)/tlibcxx/include \
|
|
-I$(SGX_QV_PATH)/QvE/Include \
|
|
-I$(SGX_QV_PATH)/appraisal/qal \
|
|
-I$(SGX_QV_PATH)/../QuoteGeneration/quote_wrapper/common/inc \
|
|
-I$(SGX_QV_PATH)/../QuoteGeneration/quote_wrapper/tdx_attest \
|
|
-I$(SGX_QV_PATH)/../QuoteGeneration/pce_wrapper/inc \
|
|
-I$(SGX_QV_PATH)/dcap_tvl \
|
|
-include./tsgxsslio.h \
|
|
-I$(PREBUILT_OPENSSL_PATH)/inc
|
|
|
|
INCLUDE_TDX := $(filter-out -I$(PREBUILT_OPENSSL_PATH)/inc,$(INCLUDE))
|
|
|
|
INCLUDE += -I$(CBOR_PATH)/trusted/include
|
|
|
|
INCLUDE_TDX += -I$(CBOR_PATH)/untrusted/include
|
|
|
|
CXXFLAGS_TDX := $(CXXFLAGS) $(COMMON_FLAGS) $(COMMON_LDFLAGS) -fPIC -Werror -Wno-unused-parameter -g
|
|
CXXFLAGS += $(COMMON_FLAGS) $(ENCLAVE_CXXFLAGS)
|
|
|
|
EDGER8R_DIR := $(LINUX_SDK_DIR)/edger8r/linux
|
|
EDGER8R := $(EDGER8R_DIR)/_build/Edger8r.native
|
|
|
|
SRC := $(wildcard *.cpp)
|
|
|
|
OBJ := $(sort $(SRC:.cpp=.o))
|
|
OBJ_TDX := $(addprefix tdx_, $(OBJ))
|
|
|
|
LIBSGX_CBOR = libsgx_cbor.a
|
|
LIBCBOR = libcbor.a
|
|
LIBSGX_CBOR_PATH = $(CBOR_PATH)/trusted/lib
|
|
LIBCBOR_PATH = $(CBOR_PATH)/untrusted/lib
|
|
CBOR_HEADER = cbor.h
|
|
SGXCBOR_INCLUDE = $(CBOR_PATH)/trusted/include
|
|
CBOR_INCLUDE = $(CBOR_PATH)/untrusted/include
|
|
|
|
LIBNAME := libsgx_ttls.a
|
|
LIBNAME_TDX := libtdx_tls.a
|
|
|
|
.PHONY: all cbor_trusted cbor_untrusted PREPARE_SGX_SSL
|
|
all: $(LIBNAME) $(LIBNAME_TDX) | $(BUILD_DIR)
|
|
$(CP) $(LIBNAME) $|
|
|
$(CP) $(LIBNAME_TDX) $|
|
|
|
|
$(TLSNAME)_t.h: $(EDLFILE) $(EDGER8R)
|
|
$(EDGER8R) --trusted --header-only --search-path $(TOP_DIR)/common/inc $<
|
|
|
|
$(EDGER8R):
|
|
$(MAKE) -C $(EDGER8R_DIR)
|
|
|
|
cbor_trusted:
|
|
@if [ ! -f $(SGXCBOR_INCLUDE)/$(CBOR_HEADER) ] || [ ! -f $(LIBSGX_CBOR_PATH)/$(LIBSGX_CBOR) ]; then \
|
|
$(MAKE) -C $(CBOR_RELATIVE_PATH) cbor_trusted; \
|
|
fi
|
|
|
|
cbor_untrusted:
|
|
@if [ ! -f $(CBOR_INCLUDE)/$(CBOR_HEADER) ] || [ ! -f $(LIBCBOR_PATH)/$(LIBCBOR) ]; then \
|
|
$(MAKE) -C $(CBOR_RELATIVE_PATH) cbor_untrusted; \
|
|
fi
|
|
|
|
$(LIBNAME): $(OBJ)
|
|
$(AR) rs $@ $(OBJ)
|
|
$(MKDIR) $(BUILD_DIR)/.libsgx_cbor
|
|
$(RM) $(BUILD_DIR)/.libsgx_cbor/* && cd $(BUILD_DIR)/.libsgx_cbor && $(AR) x $(LIBSGX_CBOR_PATH)/$(LIBSGX_CBOR)
|
|
$(AR) rs $@ $(BUILD_DIR)/.libsgx_cbor/*.o
|
|
@$(RM) -r $(BUILD_DIR)/.libsgx_cbor
|
|
|
|
$(LIBNAME_TDX): $(OBJ_TDX)
|
|
$(AR) rs $@ $(OBJ_TDX)
|
|
$(MKDIR) $(BUILD_DIR)/.libcbor
|
|
$(RM) $(BUILD_DIR)/.libcbor/* && cd $(BUILD_DIR)/.libcbor && $(AR) x $(LIBCBOR_PATH)/$(LIBCBOR)
|
|
$(AR) rs $@ $(BUILD_DIR)/.libcbor/*.o
|
|
@$(RM) -r $(BUILD_DIR)/.libcbor
|
|
|
|
$(OBJ): $(TLSNAME)_t.h cbor_trusted
|
|
$(OBJ): %.o : %.cpp
|
|
$(CXX) $(CXXFLAGS) $(INCLUDE) -c $< -o $@
|
|
|
|
$(OBJ_TDX): cbor_untrusted
|
|
$(OBJ_TDX): tdx_%.o : %.cpp
|
|
$(CXX) $(CXXFLAGS_TDX) $(INCLUDE_TDX) -DTDX_ENV -c $< -o $@
|
|
|
|
.PHONY: clean
|
|
clean:
|
|
@$(RM) *.o
|
|
@$(RM) $(COMMON_DIR)/src/*.o
|
|
@$(RM) *_t.* *_u.*
|
|
@$(RM) $(LIBNAME) $(BUILD_DIR)/$(LIBNAME)
|
|
@$(RM) $(LIBNAME_TDX) $(BUILD_DIR)/$(LIBNAME_TDX)
|
|
$(MAKE) -C $(EDGER8R_DIR) clean
|
|
$(MAKE) -C $(CBOR_PATH) clean
|
|
|
|
.PHONY: rebuild
|
|
rebuild:
|
|
$(MAKE) clean
|
|
$(MAKE) all
|