Comments (6)
0xe021 means PCK cert chain is invalid.
Have you installed default QPL and configured PCCS by following PCCS README?
If yes, pls also make sure PCCS database is NOT corrupted.
from sgxdatacenterattestationprimitives.
I checked QPL and PCCS steps log, find an error prompt, I'm not sure if it's related with this 0xe021 error. This is the .rnd error log when installing pccs:
Do you want to generate insecure HTTPS key and cert for PCCS service? [Y] (Y/N) :
Generating RSA private key, 1024 bit long modulus (2 primes)
..............................................................................................................................+++++
..............+++++
e is 65537 (0x010001)
Can't load /home/user1/.rnd into RNG
140082304180672:error:2406F079:random number generator:RAND_load_file:Cannot open file:../crypto/rand/randfile.c:88:Filename=/home/user1/.rnd
You are about to be asked to enter information that will be incorporated
into your certificate request.
from sgxdatacenterattestationprimitives.
Besides, I debugged the QuoteGenerationSample, at line 221 of https://github.com/intel/SGXDataCenterAttestationPrimitives/blob/master/SampleCode/QuoteGenerationSample/App/App.cpp, I find p_cert_data->certification_data (length is 0n500) are all 0x00 except 2 bytes at 0x55555557773c and 1 byte at 0x55555557774c
0x55555557773c: 0x02 0x02 0x00 0x00 0x00 0x00 0x00 0x00
0x555555577744: 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00
0x55555557774c: 0x0a 0x00 0x00 0x00 0x00 0x00 0x00 0x00
(gdb) p *p_cert_data
$2 = {cert_key_type = 5, size = 500, certification_data = 0x5555555775bc ""}
from sgxdatacenterattestationprimitives.
Can you open the quote file (../QuoteGenerationSample/quote.dat, with any editor).
Ideally, PCK cert chain should at the end the file.
from sgxdatacenterattestationprimitives.
I opened ../QuoteGenerationSample/quote.dat, the last 0x1F4(=0n500) bytes are all 0x00 except:
00000590: 00 00 00 00 00 00 00 00 00 00 00 00 02 02 00 00 ................
000005a0: 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 00 00 ................
This is same as debug result.
from sgxdatacenterattestationprimitives.
It means you didn't get correct PCK cert chain during Quote Generation.
Pls check QPL/QCNL/PCCS config and run QuoteGenerationSample again, make sure the PCK cert chain is correct.
from sgxdatacenterattestationprimitives.
Related Issues (20)
- QuoteGenerationSample and $ sudo systemctl status pccs error HOT 11
- Error: tee_verify_quote failed: 0xe022 HOT 4
- PCCS docker container image build error HOT 4
- Latest release points to https://github.com/intel/SGXDataCenterAttestationPrimitives/releases/tag/DCAP_1.19 HOT 3
- SampleCode/RemoteAttestation EPID attestation failed HOT 2
- No cache data for this platform on VM HOT 5
- MPA start failed and get pckcert 404 HOT 18
- No cache data for this platform and Error in sgx_qe_get_target_info. 0xe011 HOT 5
- Crash when using local_pck_url on Azure since v1.20 HOT 5
- Verification completed with Non-terminal result: a003 HOT 1
- PCCS report not found 404
- PCCS Docker build fails HOT 3
- ERROR: Quote Verification failed: 0xe002 HOT 4
- How to extract report data from DCAP quote
- How to run QuoteAppraisalSample with TDX quote
- pccs service stopped working (status : exited with FAILURE) HOT 8
- PCCS installation failed HOT 6
- Make qncl.conf location configurable for default qpl HOT 1
- 关于编译PCKCertSelectionLib失败的问题 HOT 2
- 关于手动启动pccs【dcap1.19】总线错误的问题 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from sgxdatacenterattestationprimitives.