Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

some problem about sgx_ecdsa attentation #469

Open
xglreal opened this issue Jan 26, 2021 · 2 comments
Open

some problem about sgx_ecdsa attentation #469

xglreal opened this issue Jan 26, 2021 · 2 comments

Comments

@xglreal
Copy link

xglreal commented Jan 26, 2021

I use the dcap client 'teaclave_sgx_tool ' to get attentation with the dcap service, but some error was occured.

The commend is:
./teaclave_sgx_tool attestation --url https://localhost:8080 --algorithm sgx_ecdsa

The error is:
root@cc:~/incubator-teaclave# Configured for development.
=> address: localhost
=> port: 8080
=> log: normal
=> workers: 4
=> secret key: generated
=> limits: forms = 32KiB
=> keep-alive: 5s
=> tls: enabled
Mounting /:
=> POST /sgx/dev/attestation/v4/report application/json (verify_quote)
Rocket has launched from https://localhost:8080
POST /sgx/dev/attestation/v4/report application/json:
=> Matched: POST /sgx/dev/attestation/v4/report application/json (verify_quote)
sgx_qv_verify_quote fialed: SGX_QL_QUOTE_CERTIFICATION_DATA_UNSUPPORTED
=> Outcome: Failure
=> Warning: Responding with 400 Bad Request catcher.
=> Response succeeded.

Where is the problem about it?

@xglreal xglreal changed the title some problem sgx_ecdsa attentation some problem about sgx_ecdsa attentation Jan 26, 2021
@mssun
Copy link
Member

mssun commented Jan 26, 2021

Hi @xglreal, thanks for your question! Sorry, I couldn't help you if you cannot provide more detailed information. Like how did you setup the environment?

@xglreal
Copy link
Author

xglreal commented Jan 28, 2021

Hi @xglreal, thanks for your question! Sorry, I couldn't help you if you cannot provide more detailed information. Like how did you setup the environment?

The teaclave_dcap_ref_as is builded on the steps:
1、docker run --rm -v $(pwd):/teaclave -w /teaclave
-it teaclave/teaclave-build-ubuntu-1804-sgx-dcap-1.6:latest
bash -c ". /root/.cargo/env &&
. /opt/sgxsdk/environment &&
mkdir -p build && cd build &&
cmake -DTEST_MODE=ON -DDCAP=ON .. &&
make"
2、docker run --rm -v $(pwd):/teaclave -w /teaclave
-it teaclave/teaclave-build-ubuntu-1804-sgx-2.9.1:latest
bash -c ". /root/.cargo/env &&
. /opt/sgxsdk/environment &&
mkdir -p build && cd build &&
cmake -DTEST_MODE=ON -DDCAP=ON .. &&
make"

and the teaclave_dcap_ref_as will appear in the directory incubator-teaclave/release/dcap/.

I use incubator-teaclave/release/dcap/teaclave_dcap_ref_as, the builded tool to start dcap service. The setup message is below:
Configured for development.
=> address: localhost
=> port: 8080
=> log: normal
=> workers: 4
=> secret key: generated
=> limits: forms = 32KiB
=> keep-alive: 5s
=> tls: enabled
Mounting /:
=> POST /sgx/dev/attestation/v4/report application/json (verify_quote)
Rocket has launched from https://localhost:8080

Then, I use the command ./teaclave_sgx_tool attestation --url https://localhost:8080 --algorithm sgx_ecdsa to get the dcap service, but eventually I fail to get the service.
The error message is below:
Error: ServiceError

Is there anyone can help me to fix it?

Thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants