FMSPC probing in Teaclave SGX tool

[Yu Ding <di...@apache.org>]

Hi guys,

I wonder if Teaclave sgx tool is suitable for probing fmspc by collecting
and parsing its PCK cert. Pros: get more details on fmspc plus all possible
TCB status (OK/GROUP_OUT_OF_DATE/HARDENING etc). Cons: needs to contact
online API. I can provide PR if we can provide this feature.

Best,
Yu

Re: FMSPC probing in Teaclave SGX tool

[Mingshen Sun <ms...@apache.org>]

Yes, I think that's a good suggestion. A lot of things we can dump
(like the revocation list) to help check the status of the platform.

On Sat, Jul 4, 2020 at 1:49 PM Yu Ding <di...@apache.org> wrote:
>
> Hi guys,
>
> I wonder if Teaclave sgx tool is suitable for probing fmspc by collecting
> and parsing its PCK cert. Pros: get more details on fmspc plus all possible
> TCB status (OK/GROUP_OUT_OF_DATE/HARDENING etc). Cons: needs to contact
> online API. I can provide PR if we can provide this feature.
>
> Best,
> Yu

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@teaclave.apache.org
For additional commands, e-mail: dev-help@teaclave.apache.org