Граф коммитов

397 Коммитов

Автор SHA1 Сообщение Дата
Julien Maffre 7801b5de1c
SEV-SNP ACI: Retrieve attestation report endorsements from environment (#4940) 2023-02-07 15:36:18 +00:00
Eddy Ashton 4790a6a879
Fixes for thread ID assignment (#4952) 2023-02-06 09:13:05 +00:00
Eddy Ashton 49d39614c0
Speed up piccolo test runs (#4796) 2023-01-05 13:59:20 +00:00
Andrew Jeffery 68881c5e7e
Make sandbox container nodes usable for other projects (#4767) 2022-12-16 22:04:49 +00:00
Amaury Chamayou e3e61f0a93
Remove user-facing bft references (#4760) 2022-12-16 19:27:16 +00:00
Julien Maffre f708ff0b4c
Make HTTP/2 stack compliant to standard (#4757) 2022-12-16 17:51:26 +00:00
Fotis Kounelis 78ad4b1ff1
Create a lib jwt test in ci (#4641) 2022-12-01 08:29:19 +00:00
Fotis Kounelis 66ff0a8444
Add piccolo to ccf (#4593) 2022-11-23 21:25:37 +00:00
Julien Maffre d88c76aa40
Decorate and identify SNP libraries (#4569) 2022-11-18 13:21:14 +00:00
Fotis Kounelis a94086f107
Perf tool cpp submitter (#4491) 2022-11-14 10:03:24 +00:00
Dominic Ayre 4898b1247c
Default COMPILE_TARGET in CMakeLists (#4460) 2022-11-03 11:25:53 +00:00
Julien Maffre 2de5486263
Use Open Enclave hostverify package for virtual and SNP builds (#4431) 2022-11-02 15:12:51 +00:00
Eddy Ashton 245af089bb
Add commit latency test, and fix bugs causing commit latency multipliers (#4427) 2022-11-01 14:34:24 +00:00
Julien Maffre f1e122ef87
Fix `sandbox.sh` to work on multiple platforms (#4412) 2022-10-26 19:44:53 +01:00
Amaury Chamayou 86375602ad
Enable COSE Sign1 authentication for governance endpoints (#4392) 2022-10-26 15:39:26 +00:00
Dominic Ayre 28fd219017
Change `COMPILE_TARGETS` to take a single target, including SNP (#4367) 2022-10-26 09:08:24 +00:00
Amaury Chamayou 3f8a65b36c
js_v8 removal (#4368) 2022-10-18 16:57:10 +00:00
Julien Maffre 53aee8d533
End-to-end tests misc changes (#4346) 2022-10-18 16:15:51 +01:00
Amaury Chamayou 1bbf8886f3
Cose signing authn (#4306)
* .

* wip

* wip

* wip

* wip

* tag=True does not do anything because it is default

* attach, detach...

* gov

* deps

* fix

* wip

* .

* wip

* wip

* checks

* wip

* .

* verifier

* verifier

* plug stuff in

* fmt

* .

* wip

* fix

* rest

* move test

* fix

* tweaks

* cmake

* cmake_fix

* schema

* Update include/ccf/common_auth_policies.h

Co-authored-by: Eddy Ashton <ashton.eddy@gmail.com>

* feedback

* span span span

* .

* Turn off colours in the governance test

Co-authored-by: Eddy Ashton <ashton.eddy@gmail.com>
2022-10-18 10:01:54 +00:00
Eddy Ashton 1dd0f69b45
Fix formatting of IPv6 addresses (#4339) 2022-10-18 08:20:34 +00:00
Eddy Ashton f6fec034df
Remove `ENABLE_HTTP2` compile-time flag (#4317) 2022-10-06 17:19:59 +00:00
Eddy Ashton a221771673
Initial implementation of KV service, basic gRPC sample app (#4257) 2022-09-30 09:01:55 +00:00
Julien Maffre 17b9e24394
Also install `.inc` files (#4266) 2022-09-26 14:16:58 +00:00
Julien Maffre 5318885490
Add basic gRPC support to external executor app (#4183) 2022-09-05 11:32:13 +01:00
Eddy Ashton 04b146a0f2
Initial commit of external executor app (#4173) 2022-08-26 13:49:00 +01:00
Eddy Ashton dafcd67024
Mitigations for potential stale reads from Legacy xAPIC (#4127) 2022-08-16 16:46:47 +00:00
Julien Maffre 4bb77b4ce0
Move attestation report generation/verification to `Pal` (#4083) 2022-08-09 20:19:08 +00:00
Eddy Ashton 28d71b666b
Deprecate old logging macros from application code (#4039) 2022-07-15 17:01:00 +01:00
Eddy Ashton a4244022b8
Add support for tagged loggers and app-specific logging macros (#4024) 2022-07-15 09:16:26 +01:00
Julien Maffre 8a41971203
Add experimental support for HTTP/2 (#4010) 2022-07-14 14:37:10 +00:00
Julien Maffre b21c981044
Infra: Fix node version detection (#4004) 2022-07-01 10:52:39 +01:00
Amaury Chamayou 20a9f62c59
Add unit test for check_kv_map_access (#3992) 2022-06-29 18:54:02 +00:00
Christoph M. Wintersteiger c734789723
Add ACME client for globally endorsed TLS certificates (#3877)
Co-authored-by: Amaury Chamayou <amaury@xargs.fr>
Co-authored-by: Maik Riechert <maik.riechert@arcor.de>
2022-06-15 17:06:32 +00:00
Eddy Ashton 265ee5b85f
Ensure `crypto::Pem`s contain PEM encoded contents (#3918) 2022-06-14 15:24:56 +01:00
Amaury Chamayou a50212e415
Unsafe different project (#3894) 2022-06-13 20:50:13 +01:00
Renato Golin 9cebcefddf
QUIC OpenSSL library in CCF (#3396)
Creates a new QUICTLS build into an Azure Universal Package repository,
and adds a way to retrieve it from the CCF build, making sure we include
and link to the right objects in the pre-built QUIC version of OpenSSL
for the enclave side.

It should not change the host side (still using the system's OpenSSL),
but we also need to guarantee that the versions are compatible (ie. have
the same version and backports, ex. 1.1.1f or 1.1.1o, etc).

Because Universal Packages version is strct, we can't have the final
patch letter in the end, so we make sure the packages uploaded there are
a match with the currently supported version of the Linux distro we use.

If we decide to support multiple distros in the future, we can move that
to a blob storage and do the name resolution at the Yaml/CMake level on
both building and importing sides.

MAJOR ISSUE: We can't get the 1.1.1f version that is the same as OE
because the quictls-openssl repo deletes branches too aggressively, all
we have access is from `h` onward. We're using `o` in hope it's backward
compatible but that too will soon disappear. We should NOT use this for
anything serious before we can solve this problem.
2022-05-27 19:37:53 +00:00
Amaury Chamayou 62df013fb8
Fix cmake install prefix (#3883) 2022-05-24 15:38:42 +01:00
Julien Maffre 684954467a
Asynchronous execution of start of recovery transaction (#3791) 2022-04-29 15:00:40 +01:00
Eddy Ashton 8e0b2c91cf
Restore public `ccf::Receipt` type (#3793) 2022-04-29 12:03:22 +00:00
Eddy Ashton 44a1e0644b
Pin `testssl` to v3.0.7 (#3736) 2022-04-05 10:03:04 +01:00
Eddy Ashton 5140e0f7ae
Move private headers to separate folder in install (#3716) 2022-03-29 08:25:43 +00:00
Eddy Ashton 79ad3f8b1f
Fix Raft partition test (#3672) 2022-03-22 17:37:21 +00:00
Amaury Chamayou 363a63b43d
Disable LTS tests for Unsafe build (#3655) 2022-03-14 14:05:59 +00:00
Eddy Ashton 952df50c75
Add ALPN extension to CCF servers, advertising HTTP/1.1 (#3643) 2022-03-11 11:02:16 +00:00
Eddy Ashton 978dce6e5d
Make `EnclaveAttestationProvider` public (#3626) 2022-03-04 09:10:42 +00:00
Eddy Ashton 8be03eeea2
Remove dependency on `TxReceipt` from public API (#3610) 2022-03-01 09:46:16 +00:00
Eddy Ashton ba0914bc2c
Fix Daily Build (#3595) 2022-02-24 09:10:51 +00:00
Eddy Ashton e30c6fb0ad
Separate public KV headers from implementation details (#3578) 2022-02-23 16:50:49 +00:00
Eddy Ashton c4ea8dfff2
Public header cleanup, part 2 (#3543) 2022-02-14 17:52:04 +00:00
Eddy Ashton 0208ca2483
Enable auth e2e test in V8 (#3502) 2022-02-03 09:17:12 +00:00