Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Due to compilation dependencies on two new header files, sgx_quote_5.h and sgx_quote_4.h, where sgx_quote_5.h is not available in the intel-headers deb package, it is necessary to switch to the one provided by intel-sgx-sdk. First, install the latest version 2.23.100.2 of intel-sgx-sdk:
Uninstall the previous version:
Then install:
When verifying the quote in tdx-verifier, tdx_qv_verify_quote() calls dlopen() to dynamically load libdcap_quoteprov.so, hence it requires installing libsgx-dcap-default-qpl:
The collateral (aka endorsements) required for verifying tdx quote is unable to be obtained from the PCCS service from Alibaba Cloud. So it is required to enable the following line in /etc/sgx_default_qcnl.conf to enable tdx-verifier to obtain collateral from Intel's Intel PCS service.