inclavare-containers / rats-tls

RATS architecture based TLS using librats

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

It not convenient to run rats-tls-client with sgx_ecdsa driver on host against rats-tls-server running in enclave

jiazhang0 opened this issue · comments

We have to do this to archive the goal:

# Build rats-tls in sgx mode to get rats-tls-server running in enclave
cmake -DRATS_TLS_BUILD_MODE="sgx" -DBUILD_SAMPLES=on -H. -Bbuild
make & make install

# Backup sgx mode programs
cp -a /usr/share/rats-tls/samples /usr/share/rats-tls/samples-sgx

# Build rats-tls in host mode to get rats-tls-client running on host
cmake -DBUILD_SAMPLES=on -H. -Bbuild
make & make install

# Have a test
cd /usr/share/rats-tls/samples-sgx
./rats-tls-server --attester sgx_ecdsa --tls openssl --crypto openssl --log-level=off &
cd /usr/share/rats-tls/samples
./rats-tls-client --verifier sgx_ecdsa

It is not convenient.

Dynamic libraries installed to the /usr/local/lib/rats-tls/ directory may also be overwritten, maybe we need a way to specify the installation path at compile time?