Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

kbs/config: use Intel PCS to fetch SGX/TDX quote verification collateral #329

Closed
wants to merge 1 commit into from
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions kbs/config/sgx_default_qcnl.conf
Original file line number Diff line number Diff line change
Expand Up @@ -2,15 +2,15 @@
// *** ATTENTION : This file is in JSON format so the keys are case sensitive. Don't change them.

//PCCS server address
"pccs_url": "https://localhost:8081/sgx/certification/v4/"
//"pccs_url": "https://localhost:8081/sgx/certification/v4/"

// To accept insecure HTTPS certificate, set this option to false
,"use_secure_cert": true
//,"use_secure_cert": true

// You can use the Intel PCS or another PCCS to get quote verification collateral. Retrieval of PCK
// Certificates will always use the PCCS described in pccs_url. When collateral_service is not defined, both
// PCK Certs and verification collateral will be retrieved using pccs_url
//,"collateral_service": "https://api.trustedservices.intel.com/sgx/certification/v4/"
"collateral_service": "https://api.trustedservices.intel.com/sgx/certification/v4/"

// If you use a PCCS service to get the quote verification collateral, you can specify which PCCS API version is to be used.
// The legacy 3.0 API will return CRLs in HEX encoded DER format and the sgx_ql_qve_collateral_t.version will be set to 3.0, while
Expand Down Expand Up @@ -60,4 +60,4 @@
// }
// }
//}
}
}
Loading