Community
cancel
Showing results for 
Search instead for 
Did you mean: 
114 Views

SGX sign my enclave over GNU+Linux: Key file format is not correct.

Jump to solution

I read all the required manuals to understand the Intel SGX so I decided to make my own enclave for edicational purpoce therefore I did:

https://github.com/pc-magas/myFirstEnclave

I manage to build my enclave and now I try to figure out how to sign it so I generate with either:

  • Using the command:
    openssl genrsa -out $(KEY_FILE) 2048
  • Or using the ssh_keygen command

But in either case when I try to sign them with:

sgx_sign -key ^private_key_generated_above^ -enclave enclave.o -out enclave.so -config Enclave.config.xml

I get the response:

Key file format is not correct.

So I try to figure out how to sign my build enclave. Can you help me?

Ps I've also asked in https://stackoverflow.com/questions/47498426/sgx-sign-enclave-cannot-sign-the-build-enclave-key-file...

0 Kudos
1 Solution
Hoang_N_Intel
Employee
114 Views

Commands on how to create a key and sign with SGX are documented in the SGX Developer Reference at https://download.01.org/intel-sgx/linux-1.9/docs/Intel_SGX_SDK_Developer_Reference_Linux_1.9_Open_So...

Please refer to the section under "OpenSSL* Examples" for command to create a key and section under "Enclave Signer Usage Examples" for commands to sign with SGX.

 

View solution in original post

1 Reply
Hoang_N_Intel
Employee
115 Views

Commands on how to create a key and sign with SGX are documented in the SGX Developer Reference at https://download.01.org/intel-sgx/linux-1.9/docs/Intel_SGX_SDK_Developer_Reference_Linux_1.9_Open_So...

Please refer to the section under "OpenSSL* Examples" for command to create a key and section under "Enclave Signer Usage Examples" for commands to sign with SGX.

 

View solution in original post

Reply