mirror of
https://github.com/intel/linux-sgx
synced 2026-06-08 14:49:32 +00:00
Krzysztof Wiśniewski
ed8405d0fd
SGX SDK–related attestation headers and the TVL sources originating from DCAP
tag: 'DCAP_1.25' are now relocated:
FROM: the intermediate staging area: './external/from_dcap'
(created by the '[from DCAP][move 1/2]...') commit 5b0b8e9)
INTO: their target SGX SDK repository layout.
This is a follow-on commit that places relocated files in its final locations
and updates the build system accordingly.
Additional changes:
--------------------
- `libsgx-headers` DEB/RPM package now also contains the following 2 headers:
1) sgx_qve_header.h
2) sgx_dcap_qal.h
Leveling w/ SDK - both files were part of the SDK already.
- SDK installer package now also contains the `sgx_dcap_constant_val.h` header
(from TVL), including common QvE and QAE identity verification constants.
---------
Signed-off-by: Krzysztof1 Wisniewski <krzysztof1.wisniewski@intel.com>
124 lines
3.6 KiB
Makefile
124 lines
3.6 KiB
Makefile
#
|
|
# Copyright(c) 2011-2026 Intel Corporation
|
|
#
|
|
# SPDX-License-Identifier: BSD-3-Clause
|
|
#
|
|
|
|
TOP_DIR = ../..
|
|
include $(TOP_DIR)/buildenv.mk
|
|
|
|
TLSNAME = sgx_ttls
|
|
EDLFILE = $(TOP_DIR)/common/inc/$(TLSNAME).edl
|
|
|
|
ifeq ($(DEBUG), 1)
|
|
SGXSSL_TLIB = sgx_tsgxssld
|
|
SGXSSL_TCRYPTO = sgx_tsgxssl_cryptod
|
|
else
|
|
SGXSSL_TLIB = sgx_tsgxssl
|
|
SGXSSL_TCRYPTO = sgx_tsgxssl_crypto
|
|
endif
|
|
|
|
SGX_QV_PATH ?= ../../external/dcap_source/QuoteVerification
|
|
SGX_QVE_PATH ?= ../../external/dcap_source/ae/QvE
|
|
PREBUILT_OPENSSL_PATH ?= $(SGX_QV_PATH)/../prebuilt/openssl
|
|
CBOR_PATH ?= $(LINUX_EXTERNAL_DIR)/cbor
|
|
CBOR_RELATIVE_PATH ?= ../../external/cbor
|
|
|
|
INCLUDE += -I$(COMMON_DIR)/inc/tlibc \
|
|
-I$(COMMON_DIR)/inc/internal \
|
|
-I$(COMMON_DIR)/inc \
|
|
-I$(LINUX_SDK_DIR)/tlibcxx/include \
|
|
-I$(SGX_QVE_PATH)/Include \
|
|
-I$(SGX_QV_PATH)/appraisal/qal \
|
|
-I$(SGX_QV_PATH)/../QuoteGeneration/quote_wrapper/common/inc \
|
|
-I$(SGX_QV_PATH)/../QuoteGeneration/quote_wrapper/tdx_attest \
|
|
-I$(LINUX_SDK_DIR)/tvl \
|
|
-include./tsgxsslio.h \
|
|
-I$(PREBUILT_OPENSSL_PATH)/inc
|
|
|
|
INCLUDE_TDX := $(filter-out -I$(PREBUILT_OPENSSL_PATH)/inc,$(INCLUDE))
|
|
|
|
INCLUDE += -I$(CBOR_PATH)/trusted/include
|
|
|
|
INCLUDE_TDX += -I$(CBOR_PATH)/untrusted/include
|
|
|
|
CXXFLAGS_TDX := $(CXXFLAGS) $(COMMON_LDFLAGS) -fPIC -Werror -Wno-unused-parameter -g
|
|
CXXFLAGS += $(ENCLAVE_CXXFLAGS) -Werror
|
|
|
|
EDGER8R_DIR := $(LINUX_SDK_DIR)/edger8r/linux
|
|
EDGER8R := $(EDGER8R_DIR)/_build/Edger8r.native
|
|
|
|
SRC := $(wildcard *.cpp)
|
|
|
|
OBJ := $(sort $(SRC:.cpp=.o))
|
|
OBJ_TDX := $(addprefix tdx_, $(OBJ))
|
|
|
|
LIBSGX_CBOR = libsgx_cbor.a
|
|
LIBCBOR = libcbor.a
|
|
LIBSGX_CBOR_PATH = $(CBOR_PATH)/trusted/lib
|
|
LIBCBOR_PATH = $(CBOR_PATH)/untrusted/lib
|
|
CBOR_HEADER = cbor.h
|
|
SGXCBOR_INCLUDE = $(CBOR_PATH)/trusted/include
|
|
CBOR_INCLUDE = $(CBOR_PATH)/untrusted/include
|
|
|
|
LIBNAME := libsgx_ttls.a
|
|
LIBNAME_TDX := libtdx_tls.a
|
|
|
|
.PHONY: all cbor_trusted cbor_untrusted PREPARE_SGX_SSL
|
|
all: $(LIBNAME) $(LIBNAME_TDX) | $(BUILD_DIR)
|
|
$(CP) $(LIBNAME) $|
|
|
$(CP) $(LIBNAME_TDX) $|
|
|
|
|
$(TLSNAME)_t.h: $(EDLFILE) $(EDGER8R)
|
|
$(EDGER8R) --trusted --header-only --search-path $(TOP_DIR)/common/inc $<
|
|
|
|
$(EDGER8R):
|
|
$(MAKE) -C $(EDGER8R_DIR)
|
|
|
|
cbor_trusted:
|
|
@if [ ! -f $(SGXCBOR_INCLUDE)/$(CBOR_HEADER) ] || [ ! -f $(LIBSGX_CBOR_PATH)/$(LIBSGX_CBOR) ]; then \
|
|
$(MAKE) -C $(CBOR_RELATIVE_PATH) cbor_trusted; \
|
|
fi
|
|
|
|
cbor_untrusted:
|
|
@if [ ! -f $(CBOR_INCLUDE)/$(CBOR_HEADER) ] || [ ! -f $(LIBCBOR_PATH)/$(LIBCBOR) ]; then \
|
|
$(MAKE) -C $(CBOR_RELATIVE_PATH) cbor_untrusted; \
|
|
fi
|
|
|
|
$(LIBNAME): $(OBJ)
|
|
$(AR) rs $@ $(OBJ)
|
|
$(MKDIR) $(BUILD_DIR)/.libsgx_cbor
|
|
$(RM) $(BUILD_DIR)/.libsgx_cbor/* && cd $(BUILD_DIR)/.libsgx_cbor && $(AR) x $(LIBSGX_CBOR_PATH)/$(LIBSGX_CBOR)
|
|
$(AR) rs $@ $(BUILD_DIR)/.libsgx_cbor/*.o
|
|
@$(RM) -r $(BUILD_DIR)/.libsgx_cbor
|
|
|
|
$(LIBNAME_TDX): $(OBJ_TDX)
|
|
$(AR) rs $@ $(OBJ_TDX)
|
|
$(MKDIR) $(BUILD_DIR)/.tdx_cbor
|
|
$(RM) $(BUILD_DIR)/.tdx_cbor/* && cd $(BUILD_DIR)/.tdx_cbor && $(AR) x $(LIBCBOR_PATH)/$(LIBCBOR)
|
|
$(AR) rs $@ $(BUILD_DIR)/.tdx_cbor/*.o
|
|
@$(RM) -r $(BUILD_DIR)/.tdx_cbor
|
|
|
|
$(OBJ): $(TLSNAME)_t.h cbor_trusted
|
|
$(OBJ): %.o : %.cpp
|
|
$(CXX) $(CXXFLAGS) $(INCLUDE) -c $< -o $@
|
|
|
|
$(OBJ_TDX): cbor_untrusted
|
|
$(OBJ_TDX): tdx_%.o : %.cpp
|
|
$(CXX) $(CXXFLAGS_TDX) $(INCLUDE_TDX) -DTDX_ENV -c $< -o $@
|
|
|
|
.PHONY: clean
|
|
clean:
|
|
@$(RM) *.o
|
|
@$(RM) $(COMMON_DIR)/src/*.o
|
|
@$(RM) *_t.* *_u.*
|
|
@$(RM) $(LIBNAME) $(BUILD_DIR)/$(LIBNAME)
|
|
@$(RM) $(LIBNAME_TDX) $(BUILD_DIR)/$(LIBNAME_TDX)
|
|
$(MAKE) -C $(EDGER8R_DIR) clean
|
|
$(MAKE) -C $(CBOR_PATH) clean
|
|
|
|
.PHONY: rebuild
|
|
rebuild:
|
|
$(MAKE) clean
|
|
$(MAKE) all
|