Skip to content

Commit

Permalink
AttestedTLS sample: added a note to describe the need to link to libo…
Browse files Browse the repository at this point in the history
…ehostsock and libhostresolver when apis in MBEDTLS_NET_C component is used
  • Loading branch information
soccerGB committed Jun 26, 2019
1 parent b50c608 commit a64de2a
Showing 1 changed file with 4 additions and 1 deletion.
5 changes: 4 additions & 1 deletion samples/attested_tls/README.md
Expand Up @@ -56,6 +56,7 @@ Note: Both of them can run on the same machine or separate machines.
```

### Non-enclave Client application
- When used in this scenario, this non-enclave client is assumed to be a trusted party holding secrets and only shares it with the server after the server is validated
- Connect to server port via socket
- Use OpenSSL API to configure a TLS client
- Call oe_verify_attestation_certificate to validate server's certificate
Expand All @@ -72,6 +73,8 @@ Note that there are two different build systems supported, one using GNU Make an

You can go build from the sample's root directory or go to tls_between_enclaves or tls_between_non_enclave_enclave subdirectory to build each sub-sample

Note: This sample uses an OE SDK customized version of mbedtls library for TLS channel connection. It has MBEDTLS_NET_C component enabled, which has a dependecy on the newly added [socket support](../../docs/UsingTheIOSubsystem.md#socketh) in 0.6.0 OE SDK release (for more details see [Using the Open Enclave I/O subsystem](../../docs/UsingTheIOSubsystem.md#opting-in) for details). So in order to build successfully, you would need to link with liboehostsock and libhostresolver libraries to satisfy the dependency.

### GNU Make

```bash
Expand All @@ -89,4 +92,4 @@ cd attested_tls
mkdir build && cd build
cmake ..
make run
```
```

0 comments on commit a64de2a

Please sign in to comment.