Skip to content

Commit

Permalink
Run RPC server entirely inside enclave, use TLS encryption (#362)
Browse files Browse the repository at this point in the history
- Based on Tungstenite crate
- Entire watch and send update mechanism is subsequently also moved into enclave
  • Loading branch information
Felix Müller committed Sep 14, 2021
1 parent 38d8d7d commit 0af6918
Show file tree
Hide file tree
Showing 60 changed files with 3,831 additions and 687 deletions.
9 changes: 8 additions & 1 deletion .github/workflows/build_and_test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -189,10 +189,17 @@ jobs:
env:
KEY: ${{ secrets.IAS_PRIMARY_KEY }}
SPID: ${{ secrets.IAS_SPID }}
TLS_CERTIFICATE: ${{ secrets.TLS_WS_SERVER_CERTIFICATE }}
TLS_PRIVATE_KEY: ${{ secrets.TLS_WS_SERVER_PRIVATE_KEY }}
run: |
cd ${{ env.BIN_DIR }}
echo "${{ env.KEY }}" > key.txt
echo "$$ {{ env.SPID }}" > spid.txt
echo "${{ env.SPID }}" > spid.txt
echo "${{ env.TLS_CERTIFICATE }}" > end.fullchain
echo "${{ env.TLS_PRIVATE_KEY }}" > end.rsa
chmod 644 end.fullchain
chmod 644 end.rsa
ls -al .
- name: Run local setup
# * `set -eo pipefail` is needed to return an error even if piped to `tee`.
Expand Down
Loading

0 comments on commit 0af6918

Please sign in to comment.