Merge #376

376: [PLAT-66] Attestation verification code for Nitro r=raoulstrackx a=raoulstrackx



Co-authored-by: Raoul Strackx <[email protected]>

Author: bors[bot]

.travis.yml

@@ -20,6 +20,7 @@ matrix:
             - sourceline: "deb http://apt.llvm.org/focal/ llvm-toolchain-focal-11 main"
               key_url: "https://apt.llvm.org/llvm-snapshot.gpg.key"
           packages:
+            - faketime
             - protobuf-compiler
             - libsgx-dcap-ql-dev
             - clang-11
@@ -40,6 +41,11 @@ matrix:
         - cargo test --verbose --locked -p dcap-ql --features verify
         - cargo build --verbose --locked -p aesm-client --target=x86_64-fortanix-unknown-sgx
         - cargo build --verbose --locked -p aesm-client --target=x86_64-fortanix-unknown-sgx --features sgx-isa/sgxstd
+        - cargo test --locked -p nitro-attestation-verify
+        # Unfortunately running `faketime '2021-09-10 11:00:00 GMT' cargo test -p nitro-attestation-verify` causes a segmentation
+        #  fault while compiling. We only execute `faketime` during the tests
+        - cargo test --locked -p nitro-attestation-verify --no-run && faketime '2021-09-08 11:00:00 GMT' $(find ./target/debug/deps -name "nitro_attestation_verify*" -executable)
+        - cargo test --locked -p nitro-attestation-verify --no-run && faketime '2021-09-10 11:00:00 GMT' $(find ./target/debug/deps -name "nitro_attestation_verify*" -executable)
         # NOTE: linking glibc version of OpenSSL with musl binary.
         # Unlikely to produce a working binary, but at least the build succeeds.
         - mkdir -p /tmp/muslinclude && ln -sf /usr/include/x86_64-linux-gnu/openssl /tmp/muslinclude/openssl && PKG_CONFIG_ALLOW_CROSS=1 CFLAGS=-I/tmp/muslinclude cargo build --locked -p fortanix-sgx-tools --target x86_64-unknown-linux-musl

Cargo.lock

@@ -4,6 +4,7 @@ members = [
     "fortanix-vme/eif-tools",
     "fortanix-vme/fortanix-vme-abi",
     "fortanix-vme/fortanix-vme-runner",
+    "fortanix-vme/nitro-attestation-verify",
     "fortanix-vme/tests/hello_world",
     "fortanix-vme/tests/outgoing_connection",
     "fortanix-vme/tests/incoming_connection",
@@ -32,6 +33,7 @@ exclude = ["examples"]
 
 [patch.crates-io]
 libc  = { git = "https://github.com/fortanix/libc.git", branch = "fortanixvme" }
+mbedtls = { git = "https://github.com/fortanix/rust-mbedtls", branch = "master" }
 serde = { git = "https://github.com/fortanix/serde.git", branch = "master" }
 vsock = { git = "https://github.com/fortanix/vsock-rs.git", branch = "fortanixvme" }
 rustc-serialize = { git = "https://github.com/jethrogb/rustc-serialize.git", branch = "portability" }