Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Create the /run/rune directory before running ra-tls-server.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

epm: reimplement the bundle cache

- Introduce elv used for the communication with ra-tls-server
- ra-tls-server now is moved out from wolfssl-examples
- Remove wolfssl-examples in build process
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

In enclave runtime PAL v2, the API of PAL version is named as pal_get_version
rather than pal_version.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

sgx-tools now has the capability of getting remote attestation report from IAS.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

To use gen-quote command, you also need to have a SPID registered on
IAS(https://api.portal.trustedservices.intel.com/EPID-attestation)
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Given the quote file of an Enclave, a registered `SPID` and `Subscription Key` of [IAS](https://api.portal.trustedservices.intel.com/EPID-attestation), `sgx-tools get-ias-report` command can get remote attestation report from IAS.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

In addition, move enclave-specific code into libenclave.

Signed-off-by: Shirong Hao shirong@linux.alibaba.com

Through importing but not using rune/libenclave/attestation in gen-quote.go
to make the rune/libenclave/attestation package under vendor.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Update the vendor package github.com/alibaba/inclavare-containers/rune
version to v0.0.0-20200910122807-fd8d2f54(https://github.com/alibaba/inclavare-containers/commit/fd8d2f54e423a3521a5d77fffb2c19f1bd6073f3)
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

The --debug option of rune should be enabled to show IAS report when running RA.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

iberpal-skeleton is constantly being updated, it may not be compatible with the previous images.

 Signed-off-by: Shirong Hao shirong@linux.alibaba.com

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

The new implementation introduces new object called Challenger
and the foundations for SGX EPID-based RA. In future, the object
called Attester will be added to complete the attestation package.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

In python, range paramter should use int type instead of float. And remove SGX_UNLINKABLE_SIGNATURE hardcode by variant quote_type.
Signed-off-by: NLiang Yang <liang3.yang@intel.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

rune/libenclave/skeleton && sgx-tools: Resolve the launch token adaptation problem on sgx2 + in-tree

- sgx-tools gen-token command reports an error when running on machine with FLC
- Operations related to lanunch token are not supported on machine with FLC

Signed-off-by: Shirong Hao shirong@linux.alibaba.com

epm: reconstruct the code of epm

This reverts commit 2df0d0c8.

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

shim/runtime: Add the attestation package to process remote attestation requests

shim/runtime: Store inclavare-containers configuration

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Xfrm needs support the same xsave feature in encalve as in OS.
By cpuid, it can get the same value between xfrm and xcr0.
Signed-off-by: NLiang Yang <liang3.yang@intel.com>
Reviewed-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>