topic how can i do about the Problem with the local SSL certificate?Could not query IAS in Intel® Software Guard Extensions (Intel® SGX)

how can i do about the Problem with the local SSL certificate?Could not query IAS

bin__ch — Thu, 03 Jan 2019 05:37:39 GMT

I wan to run the offical remote attestation example(sgx-ra-example),but the server output is an error:

---- IAS sigrl HTTP Request ------------------------------------------------
HTTP GET https://test-as.sgx.trustedservices.intel.com/attestation/sgx/v3/sigrl/000013dc
----------------------------------------------------------------------------
* Could not resolve proxy: proxy-us.intel.com
* Closing connection 0
Could not query IAS
could not retrieve the sigrl
error processing msg1
Waiting for a client to connect...

another ra example output:

1546485734 INFO : Received extended EPID group ID: 0
1546485734 INFO : Serialization successful
1546485734 INFO : Send to client
1546485734 INFO : MSG1 received
1546485734 INFO : Retrieving SigRL from IAS
1546485736 INFO : curl_easy_perform() failed: Problem with the local SSL certificate

1546485736 INFO : Response status is: 0
1546485736 INFO : Content-Length: 0
1546485736 INFO : Error, processing MSG1 failed
1546485736 INFO : Close connection
1546485736 INFO : Remote attestation done

I follow the offical course to get the local SSL certificate:
https://software.intel.com/en-us/articles/how-to-create-self-signed-certificates-for-use-with-intel-sgx-remote-attestation-using

my local SSL certificate has been validated：
https://software.intel.com/en-us/articles/certificate-requirements-for-intel-attestation-services

I hope someone can give me some suggestions.

Configurations of the

bin__ch — Thu, 03 Jan 2019 08:33:00 GMT

Configurations of the settings file to disable IAS proxy as the following:
//IAS_PROXY_URL=http://proxy-us.intel.com:911 //annotate this line to disable IAS proxy

and,

IAS_DISABLE_PROXY=1 //Set to non-zero to disable the use of a proxy server.

you should annotate the proxy, and other options was correct, this example will run well!

引文：bin, ch 写道：

bin__ch — Thu, 03 Jan 2019 08:34:00 GMT

bin, ch wrote:
Configurations of the settings file to disable IAS proxy as the following:
//IAS_PROXY_URL=http://proxy-us.intel.com:911 //annotate this line to disable IAS proxy
and,
IAS_DISABLE_PROXY=1 //Set to non-zero to disable the use of a proxy server.

you should annotate the proxy, and other options was correct, this example will run well!

Hi bin, ch

Marku__Enio — Thu, 04 Jul 2019 13:10:07 GMT

Hi bin, ch

I am running into the same problem as you and I have also disabled the line IAS_PROXY_URL="http://proxy-us.intel.com:911" by using ::

and SET IAS_DISABLE_PROXY=1

I still got the same message,

Have you probably changed this line SET RA_IAS_CLIENT_CERT_FILE="certificate.pem"

to the name of your self signed certificate?

Cheers,

Enio