Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/intel-secl/sgx-verification-service
https://github.com/intel-secl/sgx-verification-service
Last synced: 1 day ago
JSON representation
- Host: GitHub
- URL: https://github.com/intel-secl/sgx-verification-service
- Owner: intel-secl
- License: bsd-3-clause
- Created: 2020-08-25T14:59:53.000Z (almost 4 years ago)
- Default Branch: master
- Last Pushed: 2024-01-05T10:18:56.000Z (5 months ago)
- Last Synced: 2024-05-19T00:33:58.385Z (28 days ago)
- Language: Mustache
- Size: 622 KB
- Stars: 5
- Watchers: 9
- Forks: 3
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Lists
- Awesome-SGX-Open-Source - SGX Quote Verification Service
README
# SGX Verification Service
`SGX Verification Service` is a web service whose job is to verify SGX ECDSA Quotes
## Key features
- Verify if PCK Certificate in a quote is valid
- Verify TcbInfo, PCKCRL, QEIdentity for a platform
- RESTful APIs for easy and versatile access to above features
## System Requirements
- RHEL 8.4 or ubuntu 20.04
- Epel 8 Repo
- Proxy settings if applicable
## Software requirements
- git
- make
- makeself
- Go 1.18.8
## Step-By-Step Build Instructions
### Install required shell commands
#### Install tools from `dnf`
```shell
sudo dnf install -y git wget makeself
```
### Install `go 1.18.8`
The `SGX Verification Service` requires Go version 1.18.8 that has support for `go modules`. please keep in mind that the product has been validated with 1.18.8 and newer versions of `go` may introduce compatibility issues. You can use the following to install `go`.
```shell
wget https://dl.google.com/go/go1.18.8.linux-amd64.tar.gz
tar -xzf go1.18.8.linux-amd64.tar.gz
sudo mv go /usr/local
export GOROOT=/usr/local/go
export PATH=$GOPATH/bin:$GOROOT/bin:$PATH
```
## Build SGX Verification service
- Git clone the SGX Verification service
- Run scripts to build the SGX Verification service
```shell
git clone https://github.com/intel-secl/sgx-verification-service.git
cd sgx-verification-service
git checkout v5.1.0
make
```
### Deploy
Update sqvs.env present in dist/linux folder with required env values and then run below command to deploy SQVS.
NOTE: Retrieve appropriate Trusted RootCA certificate files for SGX platform (trusted_rootca_icx_preprod.pem for IceLake Sandbox PCS, trusted_rootca_icx_prod.pem for IceLake Live PCS and trusted_rootca_clx_prod.pem for CascadeLake Live PCS Server) from dist/linux directory in SQVS repository.
```shell
> ./out/sqvs-*.bin
```
### Manage service
- Start service
- sqvs start
- Stop service
- sqvs stop
- Restart service
- sqvs restart
- Status of service
- sqvs status
## Third Party Dependencies
- Certificate Management Service
- Authentication and Authorization Service
### Direct dependencies
Name | Repo URL | Minimum Version Required
-------- | ----------------------------- | :----------------------:
handlers | github.com/gorilla/handlers | v1.4.2
mux | github.com/gorilla/mux | v1.7.4
errors | github.com/pkg/errors | v0.9.1
logrus | github.com/sirupsen/logrus | v1.7.0
testify | github.com/stretchr/testify | v1.6.1
yaml.v3 | gopkg.in/yaml.v3 | v3.0.1
restruct | gopkg.in/restruct | v1.0.0
common | github.com/intel-secl/common | v5.1.0
clients | github.com/intel-secl/clients | v5.1.0
### Indirect Dependencies
_Note: All dependencies are listed in go.mod_