To test/use the remote attestation functionality, I have registered myself to Intel Trusted Services Infrastructure and sent a self-signed certificate.
After getting the response, I tried to use various methods to connect to the URL:
1. TLSv1.2 connection using OpenSSL
2. Use web browser by setting the client certificate as the requested one
3. Clone this (https://github.com/svartkanin/linux-sgx-remoteattestation) repository and set my certificate in that code.
However, from all of the methods that I listed, what I keep getting is that TLS connection cannot be established.
I have checked PCAP during the communication and I can see that client requests TLSv1.2,after client certificate / client key exchange / client certificate verification, the IAS server just send FIN (disconnect).
My clue is that my self-signed certificate is not registered correctly
(although from access.log on my server I can see that the Intel IAS have grabbed my certificate),
but registration service representative recommended me to post a question at this forum.
Is there anyone who suffered the same problem?
First, you need to make sure that you are using the correct cert and key by running these two commands: