PCCS handshake failed

[enclave_Research]

on red hat Enterprise Linux 8.2

After installing PCCS, and

Set USE_SECURE_CERT=FALSE in /etc/sgx_default_qcnl.conf，

check whether PCCS works normally. The following errors occur:

Trying ::1...
* TCP_NODELAY set
* connect to ::1 port 8081 failed: Connection refused
* Trying 127.0.0.1...
* TCP_NODELAY set
* Connected to localhost (127.0.0.1) port 8081 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS alert, handshake failure (552):
* error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure
* Closing connection 0
curl: (35) error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure

When running the QuoteGenerationSample program, the error information is as follows:

Step1: Call sgx_qe_get_target_info:Error in sgx_qe_get_target_info. 0xe019

pccs log：

[error]: The private key or certificate for HTTPS server is missing.

Why is this problem and how should I solve it？

[JesusG_Intel · Accepted solution]

Hello enclave_research,

It seems that you posted two threads about the same issue. Since you provided more information in this thread, we will help you here and delete the other thread.

0xe19 corresponds to a network error and it seems like your SSL/HTTPS is misconfigured. We are trying to find more information but you may want to refer to this page, https://aboutssl.org/fix-ssl-tls-handshake-failed-error/, for some hints.

Regards,

Jesus G.

Intel Customer Support

[JesusG_Intel]

Hello enclave_research,

Do you still need help with this issue?

Sincerely,

Jesus G.

Intel Customer Support

[JesusG_Intel]

I hope the information I provided was helpful to you. Since we haven't heard from you we will no longer monitor this thread. If you need further assistance with this issue, please create new post.

[jankipmehta]

Hello enclave_research,

The error code 0xe19 signifies a network problem, and your SSL/HTTPS configuration appears to be misconfigured. I found an article on Google that may be helpful for resolving SSL Handshake Failed errors - https://sslwiki.org/how-to-fix-ssl-handshake-failed-error/

[PriyaMervana]

@enclave_Research 

The error code `0xe19` indicates a network-related issue, and it appears that your SSL/HTTPS configuration is not properly set up. We are endeavoring to gather additional details, but you may find it beneficial to refer to this page https://sslinsights.com/fix-the-ssl-handshake-failed-error/ for some helpful insights.

Thanks!

[mann_brenner]

0xe19 indicates a network error, likely related to misconfigured SSL/HTTPS settings. You can read this article https://cheapsslweb.com/blog/how-to-fix-ssl-tls-handshake-failed-error/ May it will be helpful. 

[riyasander]

The error 0xe19 indicates an issue, probably with your SSL/HTTPS settings for the PCCS server. To get this sorted, I’d recommend checking out this article: https://www.ssl2buy.com/wiki/how-to-fix-the-ssl-tls-handshake-failed-error. It could point you in the right direction to resolve the problem.

[riyasander]

The error 0xe19 indicates an issue, probably with your SSL/HTTPS settings for the PCCS server. To resolve this, I recommend checking out this article: https://www.ssl2buy.com/wiki/how-to-fix-the-ssl-tls-handshake-failed-error. It could point you in the right direction to resolve the problem.