Skip to content

Commit

Permalink
Update the documentation for OpenSSL 3
Browse files Browse the repository at this point in the history
Signed-off-by: Mic Bowman <mic.bowman@intel.com>
  • Loading branch information
cmickeyb authored and bvavala committed Sep 18, 2023
1 parent c99f7bb commit e3e94a9
Show file tree
Hide file tree
Showing 2 changed files with 16 additions and 16 deletions.
26 changes: 13 additions & 13 deletions docs/host_install.md
Original file line number Diff line number Diff line change
Expand Up @@ -60,17 +60,17 @@ in `/etc/aesmd.confg` and restart aesmd with `systemctl restart aesmd.

## Install the SGX SDK

Private Data Objects has been tested with version 2.15.1 of the SGX
Private Data Objects has been tested with version 2.21 of the SGX
SDK. You can download prebuilt binaries for the SDK and kernel drivers
from [01.org](https://download.01.org/intel-sgx/sgx-linux/2.15.1/distro/ubuntu20.04-server/).
from [01.org](https://download.01.org/intel-sgx/sgx-linux/2.21/distro/ubuntu20.04-server/).

The following commands will download and install version 2.15.1 of the SGX
The following commands will download and install version 2.21 of the SGX
SDK. When asked for the installation directory, we suggest that you install
the SDK into the directory `/opt/intel`.

```bash
DRIVER_REPO=https://download.01.org/intel-sgx/sgx-linux/2.15.1/distro/ubuntu20.04-server/
SDK_FILE=sgx_linux_x64_sdk_2.15.101.1.bin
DRIVER_REPO=https://download.01.org/intel-sgx/sgx-linux/2.21/distro/ubuntu20.04-server/
SDK_FILE=sgx_linux_x64_sdk_2.21.100.1.bin

wget ${DRIVER_REPO}/${SDK_FILE} -P /tmp
chmod a+x /tmp/${SDK_FILE}
Expand Down Expand Up @@ -101,7 +101,7 @@ that contain the necessary LVI mitigations. The following
commands will download and install these binaries:

```bash
wget "https://download.01.org/intel-sgx/sgx-linux/2.15.1/as.ld.objdump.r4.tar.gz" -P /tmp
wget "https://download.01.org/intel-sgx/sgx-linux/2.21/as.ld.objdump.r4.tar.gz" -P /tmp
sudo mkdir /opt/intel/sgxsdk.extras
sudo tar -xzf /tmp/as.ld.objdump.r4.tar.gz -C /opt/intel/sgxsdk.extras
export PATH=/opt/intel/sgxsdk.extras/external/toolset/ubuntu20.04:${PATH}
Expand All @@ -110,13 +110,13 @@ export PATH=/opt/intel/sgxsdk.extras/external/toolset/ubuntu20.04:${PATH}
## Build and Install SGX SSL

SGX OpenSSL is a compilation of OpenSSL specifically for use within SGX
enclaves. We have tested PDO with SGX SSL version `lin_2.10_1.1.1g`
enclaves. We have tested PDO with SGX SSL version `3.0-rc2`

Detailed instructions for building and installing SGX SSL is available
from the
[Intel SGX SSL github repository](https://github.com/intel/intel-sgx-ssl).

Follow these steps to compile and install version `lin_2.10_1.1.1g`:
Follow these steps to compile and install version `3.0-rc2`:

- Ensure you have the SGX SDK environment variables activated:
```bash
Expand All @@ -128,19 +128,19 @@ source /opt/intel/sgxsdk/environment
git clone 'https://github.com/intel/intel-sgx-ssl.git'
```

- Check out the recommended version (`lin_2.10_1.1.1g`):
- Check out the recommended version (`3.0-rc2`):

```bash
cd intel-sgx-ssl
git checkout lin_2.10_1.1.1g
git checkout 3.0-rc2
```

- Download the OpenSSL source package that will form the base of this
SGX SSL install:

```bash
cd openssl_source
wget 'https://www.openssl.org/source/openssl-1.1.1g.tar.gz'
wget 'https://www.openssl.org/source/openssl-3.0.10.tar.gz'
cd ..
```

Expand All @@ -152,8 +152,8 @@ mode you must have installed the [SGX kernel driver](install.md).
- Compile and install the SGX SSL project.
```bash
cd Linux
make all
sudo make DESTDIR=/opt/intel/sgxssl install
make SGX_MODE=${SGX_MODE} NO_THREADS=1 DESTDIR=/opt/intel/sgxssl all
sudo make install
```

- Export the `SGX_SSL` environment variable to enable the build
Expand Down
6 changes: 3 additions & 3 deletions docs/install.md
Original file line number Diff line number Diff line change
Expand Up @@ -137,7 +137,7 @@ the DCAP SGX kernel driver:

```bash
UBUNTU_VERS=20.04
DRIVER_REPO=https://download.01.org/intel-sgx/sgx-linux/2.15.1/distro/ubuntu${UBUNTU_VERS}-server/
DRIVER_REPO=https://download.01.org/intel-sgx/sgx-linux/2.21/distro/ubuntu${UBUNTU_VERS}-server
DRIVER_FILE=sgx_linux_x64_driver_1.41.bin

wget ${DRIVER_REPO}/${DRIVER_FILE} -P /tmp
Expand All @@ -159,8 +159,8 @@ The following commands will download and install the SDK driver version
2.11 of the SGX kernel driver:
```bash
UBUNTU_VERS=20.04
DRIVER_REPO=https://download.01.org/intel-sgx/sgx-linux/2.15.1/distro/ubuntu${UBUNTU_VERS}-server
DRIVER_FILE=sgx_linux_x64_driver_2.11.0_2d2b795.bin
DRIVER_REPO=https://download.01.org/intel-sgx/sgx-linux/2.21/distro/ubuntu${UBUNTU_VERS}-server
DRIVER_FILE=sgx_linux_x64_driver_2.11.54c9c4c.bin

wget ${DRIVER_REPO}/${DRIVER_FILE} -P /tmp
chmod a+x /tmp/${DRIVER_FILE}
Expand Down

0 comments on commit e3e94a9

Please sign in to comment.