topic Re:PCCS handshake failed in Intel® Software Guard Extensions (Intel® SGX)

PCCS handshake failed

enclave_Research — Thu, 21 Oct 2021 09:09:22 GMT

on red hat Enterprise Linux 8.2

After installing PCCS, and

Set USE_SECURE_CERT=FALSE in /etc/sgx_default_qcnl.conf，

check whether PCCS works normally. The following errors occur:

Trying ::1...
* TCP_NODELAY set
* connect to ::1 port 8081 failed: Connection refused
* Trying 127.0.0.1...
* TCP_NODELAY set
* Connected to localhost (127.0.0.1) port 8081 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS alert, handshake failure (552):
* error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure
* Closing connection 0
curl: (35) error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure

When running the QuoteGenerationSample program, the error information is as follows:

Step1: Call sgx_qe_get_target_info:Error in sgx_qe_get_target_info. 0xe019

pccs log：

[error]: The private key or certificate for HTTPS server is missing.

Why is this problem and how should I solve it？

Re:PCCS handshake failed

JesusG_Intel — Tue, 26 Oct 2021 00:21:12 GMT

Hello enclave_research,

It seems that you posted two threads about the same issue. Since you provided more information in this thread, we will help you here and delete the other thread.

0xe19 corresponds to a network error and it seems like your SSL/HTTPS is misconfigured. We are trying to find more information but you may want to refer to this page, https://aboutssl.org/fix-ssl-tls-handshake-failed-error/, for some hints.

Regards,

Jesus G.

Intel Customer Support

Re:PCCS handshake failed

JesusG_Intel — Fri, 29 Oct 2021 21:15:59 GMT

Hello enclave_research,

Do you still need help with this issue?

Sincerely,

Jesus G.

Intel Customer Support

Re: PCCS handshake failed

JesusG_Intel — Thu, 04 Nov 2021 17:17:58 GMT

I hope the information I provided was helpful to you. Since we haven't heard from you we will no longer monitor this thread. If you need further assistance with this issue, please create new post.

Re: PCCS handshake failed

jankipmehta — Wed, 19 Apr 2023 10:58:53 GMT

Hello enclave_research,

The error code 0xe19 signifies a network problem, and your SSL/HTTPS configuration appears to be misconfigured. I found an article on Google that may be helpful for resolving SSL Handshake Failed errors - https://sslwiki.org/how-to-fix-ssl-handshake-failed-error/

Re: PCCS handshake failed

PriyaMervana — Fri, 17 May 2024 11:21:12 GMT

@enclave_Research

The error code `0xe19` indicates a network-related issue, and it appears that your SSL/HTTPS configuration is not properly set up. We are endeavoring to gather additional details, but you may find it beneficial to refer to this page https://sslinsights.com/fix-the-ssl-handshake-failed-error/ for some helpful insights.

Thanks!

Re: PCCS handshake failed

mann_brenner — Wed, 21 Aug 2024 07:03:50 GMT

0xe19 indicates a network error, likely related to misconfigured SSL/HTTPS settings. You can read this article https://cheapsslweb.com/blog/how-to-fix-ssl-tls-handshake-failed-error/ May it will be helpful.

Re: PCCS handshake failed

riyasander — Thu, 17 Oct 2024 06:45:27 GMT

The error 0xe19 indicates an issue, probably with your SSL/HTTPS settings for the PCCS server. To get this sorted, I’d recommend checking out this article: https://www.ssl2buy.com/wiki/how-to-fix-the-ssl-tls-handshake-failed-error. It could point you in the right direction to resolve the problem.

Re: PCCS handshake failed

riyasander — Thu, 17 Oct 2024 06:47:30 GMT

The error 0xe19 indicates an issue, probably with your SSL/HTTPS settings for the PCCS server. To resolve this, I recommend checking out this article: https://www.ssl2buy.com/wiki/how-to-fix-the-ssl-tls-handshake-failed-error. It could point you in the right direction to resolve the problem.