<!--
  We're glad to anwser any questions related to Teaclave.
  To help people quickly understand the issue, please also
  include some background and context of the question.

  We have documented many useful information on the homepage,
  please check them out first: https://teaclave.apache.org/docs/.
-->

I follow the guide of *my-first-function.md* to run *builtin_echo.py*, got 
exception, and found **signing_cert** is empty.

The details are as follows:

First, start up services

```bash
·> (cd docker && ./run-teaclave-services.sh)
/dev/isgx device detected.
aesmd-socket volume detected.
COMMAND: docker-compose -f docker-compose-ubuntu-1804.yml -f 
docker-compose-isgx-dev.override.yml -f docker-compose-aesm-vol.override.yml up
Starting teaclave-storage-service        ... done
Starting teaclave-access-control-service ... done
Starting teaclave-authentication-service ... done
Starting teaclave-file-service           ... done
Starting teaclave-scheduler-service      ... done
Starting teaclave-management-service     ... done
Starting teaclave-execution-service      ... done
Starting teaclave-frontend-service       ... done
Attaching to teaclave-storage-service, teaclave-file-service, 
teaclave-access-control-service, teaclave-scheduler-service, 
teaclave-authentication-service, teaclave-management-service, 
teaclave-execution-service, teaclave-frontend-service
```

Second, run the "builtin_echo.py"

```bash
·> cd examples/python
·> PYTHONPATH=../../sdk/python python3 builtin_echo.py 'Hello, Teaclave!'

Traceback (most recent call last):
  File "builtin_echo.py", line 74, in <module>
    main()
  File "builtin_echo.py", line 66, in main
    rt = example.echo(message)
  File "builtin_echo.py", line 31, in echo
    with connect_authentication_service() as client:
  File "/home/douchuan/work/incubator-teaclave/examples/python/utils.py", line 
56, in connect_authentication_service
    return AuthenticationService(AUTHENTICATION_SERVICE_ADDRESS,
  File "/home/douchuan/work/incubator-teaclave/sdk/python/teaclave.py", line 
98, in connect
    _verify_report(self._as_root_ca_cert_path, self._enclave_info_path,
  File "/home/douchuan/work/incubator-teaclave/sdk/python/teaclave.py", line 
638, in _verify_report
    signing_cert = load_certificate(FILETYPE_ASN1, signing_cert)
  File "/home/douchuan/.local/lib/python3.8/site-packages/OpenSSL/crypto.py", 
line 1973, in load_certificate
    _raise_current_error()
  File "/home/douchuan/.local/lib/python3.8/site-packages/OpenSSL/_util.py", 
line 57, in exception_from_error_queue
    raise exception_type(errors)
OpenSSL.crypto.Error: [('asn1 encoding routines', 'ASN1_get_object', 'header 
too long')]
```
I add print in teaclave.py _verify_report, found **signing_cert** is empty

```bash
·> PYTHONPATH=../../sdk/python python3 builtin_echo.py 'Hello, Teaclave!'
ext= {'report': [], 'signature': [], 'signing_cert': []}
Traceback (most recent call last):
  File "builtin_echo.py", line 74, in <module>
    main()
  File "builtin_echo.py", line 66, in main
    rt = example.echo(message)
  File "builtin_echo.py", line 31, in echo
    with connect_authentication_service() as client:
  File "/home/douchuan/work/incubator-teaclave/examples/python/utils.py", line 
56, in connect_authentication_service
    return AuthenticationService(AUTHENTICATION_SERVICE_ADDRESS,
  File "/home/douchuan/work/incubator-teaclave/sdk/python/teaclave.py", line 
98, in connect
    _verify_report(self._as_root_ca_cert_path, self._enclave_info_path,
  File "/home/douchuan/work/incubator-teaclave/sdk/python/teaclave.py", line 
638, in _verify_report
    signing_cert = load_certificate(FILETYPE_ASN1, signing_cert)
  File "/home/douchuan/.local/lib/python3.8/site-packages/OpenSSL/crypto.py", 
line 1973, in load_certificate
    _raise_current_error()
  File "/home/douchuan/.local/lib/python3.8/site-packages/OpenSSL/_util.py", 
line 57, in exception_from_error_queue
    raise exception_type(errors)
OpenSSL.crypto.Error: [('asn1 encoding routines', 'ASN1_get_object', 'header 
too long')]
```



My compile env is:

```bash
-- Submodule update
SGX_SDK=/opt/sgxsdk
SGX_MODE=HW
RUSTUP_TOOLCHAIN=nightly-2020-10-25
DCAP=OFF
BUILD_TYPE=debug
TEACLAVE_SYMLINKS=/tmp/teaclave_symlinks.7cstwtqIGo8Q
EXECUTOR_BUILTIN=ON
EXECUTOR_MESAPY=ON
EXECUTOR_WAMR=ON
-- ====== /teaclave/build/environment GENERATED ======
-- Configuring done
-- Generating done
-- Build files have been written to: /teaclave/build
```

sgx driver:

```bash
·> modinfo isgx
filename:       /lib/modules/5.4.0-42-generic/kernel/drivers/intel/sgx/isgx.ko
license:        Dual BSD/GPL
version:        2.11.0
author:         Jarkko Sakkinen <[email protected]>
description:    Intel SGX Driver
srcversion:     87784B58E0AACD186EEF5B6
alias:          acpi*:INT0E0C:*
depends:
retpoline:      Y
name:           isgx
vermagic:       5.4.0-42-generic SMP mod_unload
```

Thanks, looking forward to answer.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/apache/incubator-teaclave/issues/594

Reply via email to