{"id":13640964,"url":"https://github.com/Microsoft/Azure-DCAP-Client","last_synced_at":"2025-04-20T07:31:25.902Z","repository":{"id":33263470,"uuid":"148389444","full_name":"microsoft/Azure-DCAP-Client","owner":"microsoft","description":"Interfaces between SGX SDKs and the Azure Attestation SGX Certification Cache.","archived":false,"fork":false,"pushed_at":"2024-06-11T12:48:15.000Z","size":1611,"stargazers_count":60,"open_issues_count":21,"forks_count":45,"subscribers_count":16,"default_branch":"master","last_synced_at":"2024-10-29T18:20:00.856Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/microsoft.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2018-09-11T22:45:34.000Z","updated_at":"2024-09-07T02:48:21.000Z","dependencies_parsed_at":"2023-09-26T23:35:28.324Z","dependency_job_id":"c621d9d7-e860-4c81-9d51-c57f5dddbb25","html_url":"https://github.com/microsoft/Azure-DCAP-Client","commit_stats":{"total_commits":421,"total_committers":30,"mean_commits":"14.033333333333333","dds":"0.45130641330166266","last_synced_commit":"a9af7b46561859b68f112b20b6ef00a49a197c22"},"previous_names":[],"tags_count":14,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2FAzure-DCAP-Client","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2FAzure-DCAP-Client/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2FAzure-DCAP-Client/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2FAzure-DCAP-Client/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft","download_url":"https://codeload.github.com/microsoft/Azure-DCAP-Client/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":223821971,"owners_count":17208775,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-02T01:01:16.267Z","updated_at":"2024-11-09T11:30:32.286Z","avatar_url":"https://github.com/microsoft.png","language":"C++","readme":"# Azure Data Center Attestation Primitives (DCAP) Client\n\nThis library serves as a quoting data provider plugin for the\n[Intel SGX Data Center Attestation Primitives (DCAP)](https://github.com/intel/SGXDataCenterAttestationPrimitives).\nSpecifically, the Intel DCAP library will search out and load provider plugins, such as the Azure DCAP\nClient. This provider plugin is then used to fetch certain data files, such as platform certificates,\nTCB structures, and revocation lists.\n\nThe Azure DCAP Client fetches artifacts from an Azure-internal caching service. The purpose of this\ncache is to ensure that all Azure hosts always have the correct data available and local within\nthe Azure cloud.\n\nThe data serviced by the Azure cache are all Intel-originating, and are rooted to Intel CAs. The\ncache serves simply to ensure that there are no external dependencies on Intel for workloads running\non Azure infrastructure.\n\n# Building\n\n## Linux\n\nSee [src/Linux/README.MD](src/Linux/README.MD).\n\n## Windows\n\nSee [src/Windows/README.MD](src/Windows/README.MD).\n\n# Implementation\n\nThe library builds the full URL of the artifacts served by the Azure-internal caching service from the parameters passed to the `sgx_ql_get_revocation_info_t` and `sgx_get_qe_identity_info_t` API calls. \n\nFor the certificate chain associated with an Intel SGX quote, each CRL Distribution Point is wrapped into an Azure-specific URL before being fetched by the Azure-DCAP-Client library. For example, the well-known Intel SGX Root CA CRL endpoint (https://certificates.trustedservices.intel.com/IntelSGXRootCA.crl) is served by the Azure-internal caching service at: https://global.acccache.azure.net/sgx/certificates/pckcrl?uri=https://certificates.trustedservices.intel.com/IntelSGXRootCA.crl\u0026api-version=API_VERSION (where `API_VERSION` specifies the current API version).\n\n# Configuration\n\nThe Azure-DCAP-Client library uses the following environment variables if set:\n\n* `AZDCAP_CACHE` - Represents the base directory where the library cache directory `.az-dcap-client` is created. The default value is `$HOME` in Linux and LocalLow in Windows.\n* `AZDCAP_BASE_CERT_URL` and `AZDCAP_CLIENT_ID` - Used in conjunction to explicitly overwrite the default values for the PCK caching service. These should be used only for development purposes and they **must** not be used in any production environment.\n* `AZDCAP_COLLATERAL_VERSION` - Used to specify the collateral version requested from the PCK caching service. Must be either'v1' or 'v2' if specified and defaults to 'v1' if unspecified.\n* `AZDCAP_DEBUG_LOG_LEVEL` - Used to enable logging to stdout for debug purposes. Supported values are INFO, WARNING, and ERROR; any other values will fail silently. If a logging callback is set by the caller such as open enclave this setting will be ignored as the logging callback will have precedence. Log levels follow standard behavior: INFO logs everything, WARNING logs warnings and errors, and ERROR logs only errors. Default setting has logging off. These capatalized values are represented internally as strings.\n* `AZDCAP_PRIMARY_BASE_CERT_URL` and `AZDCAP_SECONDARY_BASE_CERT_URL` - Used in conjunction to explicitly overwrite the default values of endpoints to fetch certificates. These should be used only for development purposes and they **must** not be used in any production environment.\n* `AZDCAP_BYPASS_BASE_URL`- Used in conjunction to explicitly fetch certificates from PCK caching service instead of the host agent. This should be used only for development purposes and **must** not be used in any production environment.\n\n# See Also\n\n1. [Open Enclave](https://github.com/Microsoft/openenclave), a cross-platform library for authoring\n   enclaves.\n\n# Contributing\n\nThis project welcomes contributions and suggestions.  Most contributions require you to agree to a\nContributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us\nthe rights to use your contribution. For details, visit https://cla.microsoft.com.\n\nWhen you submit a pull request, a CLA-bot will automatically determine whether you need to provide\na CLA and decorate the PR appropriately (e.g., label, comment). Simply follow the instructions\nprovided by the bot. You will only need to do this once across all repos using our CLA.\n\nThis project has adopted the [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/).\nFor more information see the [Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/) or\ncontact [opencode@microsoft.com](mailto:opencode@microsoft.com) with any additional questions or comments.\n\n## Formatting\n\nPrior to submitting pull requests, please run clang-format -i on your sources to ensure consistent\nstyling with the rules contained in `src/.clang-format`.\n","funding_links":[],"categories":["Remote Attestation (RA) and Secure Channels"],"sub_categories":["Library OSes and SDKs"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FMicrosoft%2FAzure-DCAP-Client","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FMicrosoft%2FAzure-DCAP-Client","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FMicrosoft%2FAzure-DCAP-Client/lists"}