Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Marku__Enio
Beginner
325 Views

Running intel/sgx-ra-sample

Jump to solution

Hi,

 

I am building an SGX application and I tried to run Intel RA as it is mentioned in https://github.com/intel/sgx-ra-sample

I am using Windows and I was able to built it but I am not able to execute it.

When I go to the directory vs\x64\Debug and execute the command 

run-client host:7777

I got an error: getaddrinfo: No such host is known..

Also when I execute the command 

run-server -A  7777

I got an error:  cert_load_file:IASReportSigningCertificate.pem: No such file or directory

 

I went through the code and I realized (at least what I think) that the file IASReportSigningCertificate.pem does not exist and I could not find it on my Windows System directory. I know that some edits need to be done at settings.cmd file but I do not know where should I find the IAS certificate in my pc.

Has anyone tried to run this sample successfully? If yes, I would really appreciate if these guys can give me a feedback

0 Kudos
1 Solution
Scott_R_Intel
Employee
325 Views

Hello Enio.

The Attestation Report Signing CA Certificate (IASReportSigningCertificate.pem) file will be sent via email after your self-signed x.509 cert has been added to the DEV IAS environment. For more information, see the Prerequisites section of the web page below that goes along with the remote attestation sample code.

https://software.intel.com/en-us/articles/code-sample-intel-software-guard-extensions-remote-attesta...

Regards.

Scott

View solution in original post

6 Replies
Scott_R_Intel
Employee
326 Views

Hello Enio.

The Attestation Report Signing CA Certificate (IASReportSigningCertificate.pem) file will be sent via email after your self-signed x.509 cert has been added to the DEV IAS environment. For more information, see the Prerequisites section of the web page below that goes along with the remote attestation sample code.

https://software.intel.com/en-us/articles/code-sample-intel-software-guard-extensions-remote-attesta...

Regards.

Scott

View solution in original post

Marku__Enio
Beginner
325 Views

Hi Scott,

I have followed the link for using self signed certificate but the verification at the last step was unsuccessful, anyway I did some research and the solution is to send the {CommonName}.cert file as .txt file. I did that and I got a reply from Intel that they are processing my requests but has been around 24 hours that I still have not got back an email by them with SPID. Is that a normal procedure by Intel or is that taking too long?

Cheers,

Enio

Scott_R_Intel
Employee
325 Views

Hi Enio.

Generally, turn around time is 2-3 days, depending on our back end team's workload.

Scott

bashar__golam
Beginner
325 Views

Hi,

 While I creating Self-Signed Certificates for use with Intel® SGX Remote Attestation using OpenSSL I got error (please see the attachment) at the final step to verify that my certificate passes the openssl verification.

Can anyone suggest?

Marku__Enio
Beginner
325 Views

Hi bashar,

 

Just sent a version of certificate you obtained in .txt file by contacting Intel. Then they will verify it and after verification, if succesful you will get an EPID and a link to download the certificate

 

Hope this helps,

 

Enio

Marku__Enio
Beginner
325 Views

Hi Scott,

Intel verified my certificate, but now I get an error when I try to query IAS for message 2 from service provider to IAS. 

To sp.exe I got the following error

Could not query IAS

could not retrieve the sigrl

error processing msg1

I have used -v to run the server and get more details and I realized that when I do a HTTP Get request to IAS the url looks like this

GET https://test-as.sgx.trustedservices.intel.com/attestation/sgx/v3/sigrl/gid

However I checked the IAS documentation and HTTP GET request looks like

GET https://test-as.sgx.trustedservices.intel.com:443/attestation/sgx/v3/sigrl/00000010

 

Do you think the problem is that the port is not given at my HTTP GET request?

Also I see another suspicious thing about gid.

msg.gid at my sp.exe is different from gid in HTTP GET request. 

Also do I need to do some addings at settings.cmd file for that problem?

 

I would really appreciate any help

Have a nice day

Enio

Reply