general/occlum
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
295d52fbe8
occlum/demos/remote_attestation
History
He Sun 6d7597c25e Polish gRPC and remote attestation demos 
1. Disable zlib _explictly_ when building libcurl in remote attestaion demo.
The reason for this is that zlib may be implictly linked by the build system of
libcurl but not the zlib library is not copied into the Occlum FS image.
2. Use `make -j$(nproc)`
3. Fix typos
2020-01-23 04:40:54 +00:00
..
app Add SGX remote attestaion demo 2019-12-13 11:56:21 +00:00
conf Add SGX remote attestaion demo 2019-12-13 11:56:21 +00:00
lib Add SGX remote attestaion demo 2019-12-13 11:56:21 +00:00
.gitignore Add SGX remote attestaion demo 2019-12-13 11:56:21 +00:00
CMakeLists.txt Add SGX remote attestaion demo 2019-12-13 11:56:21 +00:00
download_and_build.sh Polish gRPC and remote attestation demos 2020-01-23 04:40:54 +00:00
README.md Add SGX remote attestaion demo 2019-12-13 11:56:21 +00:00
run_on_occlum.sh Add SGX remote attestaion demo 2019-12-13 11:56:21 +00:00

README.md

SGX Remote Attestation Demo

This project demonstrates how to do remote attestation on Occlum.

In a nutshell, Occlum provides SGX capabilities to user apps through ioctls on a special device (/dev/sgx). To hide the low-level details of ioctls from user apps, a user-friendly, remote attestation library is provided in this demo.

Prerequisites. This demo needs to access Intel Attestation Service (IAS). To do this, a developer needs to contact Intel to obtain a Service Provider ID (SPID) and the associated Service Provider certificate. The certificate and key files should be put into conf/certs, and configure the SPID and paths of the certificate and key files in conf/ra_config.example.json.

Step 1. Build this demo

download_and_build.sh

Step 2. Run this demo on Occlum

run_on_occlum.sh