remote attestation

you_w_ · ‎09-06-2017

Hi everyone:

1. While doing remote attestation, I get 400 as response to verify Quote. I don't know why this happened. Is there anyone who can tell me the reason. I use linkable quote.

1504674443 INFO  : Curl initialized successfully
1504674443 INFO  : setting cert...
1504674443 INFO  : ../client.pem
1504674443 INFO  : Attestation playload: {"isvEnclaveQuote":"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"}

[New Thread 0x7fffef7ff700 (LWP 12643)]
[Thread 0x7fffef7ff700 (LWP 12643) exited]
*   Trying 208.39.114.225...
* Connected to test-as.sgx.trustedservices.intel.com (208.39.114.225) port 443 (#0)
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* ALPN, server accepted to use http/1.1
* Server certificate:
* 	 subject: C=US; ST=CA; L=Santa Clara; O=Intel Corporation; CN=test-as.sgx.trustedservices.intel.com
* 	 start date: Sep 14 17:24:30 2016 GMT
* 	 expire date: Sep  4 17:24:30 2018 GMT
* 	 subjectAltName: test-as.sgx.trustedservices.intel.com matched
* 	 issuer: C=US; ST=CA; L=Santa Clara; O=Intel Corporation; CN=Intel External Issuing CA 6A
* 	 SSL certificate verify ok.
> POST /attestation/sgx/v1/report HTTP/1.1
Host: test-as.sgx.trustedservices.intel.com
Accept: */*
Content-Type: application/json
Content-Length: 1511
Expect: 100-continue

< HTTP/1.1 100 Continue
< HTTP/1.1 400 Bad Request
< content-length: 0
< request-id: 368007f7b7ed4c2aa073523b617a9269
< date: Wed, 06 Sep 2017 05:07:25 GMT
< Connection: keep-alive
* HTTP error before end of send, stop sending
< 
* Closing connection 0
1504674445 INFO  : Quote attestation returned status: 400

2. Where I can get the IAS public key for verify the quote signature?

Thanks

Hoang_N_Intel · ‎09-18-2017

I will try to help you with this remote attestation error. Can you help provide the processing flow before the call? Do you have a separate service provider that is making this call?

you_w_ · ‎09-18-2017

Hi Hoang Nguyen:

Thank you for your replay ! I solved this proble, the reason is that the quote length error. If you have good knowledge on remote attestation, May I ask you Another question. https://software.intel.com/en-us/forums/intel-software-guard-extensions-intel-sgx/topic/744270

Thank you!

Regards

you