Fetch quotes from Marblerun Prometheus REST API endpoint

app-libs/stf/Cargo.toml

@@ -49,10 +49,7 @@ sp-keyring = { git = "https://github.com/paritytech/substrate.git", branch = "po
 [features]
 default = ["std"]
 evm = ["ita-sgx-runtime/evm"]
-evm_std = [
-    "evm",
-    "ita-sgx-runtime/evm_std",
-]
+evm_std = ["evm", "ita-sgx-runtime/evm_std"]
 sgx = [
     "sgx_tstd",
     "itp-sgx-externalities/sgx",

cli/Cargo.toml

@@ -51,10 +51,7 @@ itp-utils = { path = "../core-primitives/utils" }
 
 [features]
 default = []
-evm = [
-    "ita-stf/evm_std",
-    "pallet-evm",
-]
+evm = ["ita-stf/evm_std", "pallet-evm"]
 teeracle = []
 sidechain = []
 offchain-worker = []

core-primitives/enclave-api/ffi/src/lib.rs

@@ -7,6 +7,17 @@ use sgx_types::{
 
 extern "C" {
 
+	pub fn generate_dcap_ra_extrinsic_from_quote_internal(
+		eid: sgx_enclave_id_t,
+		retval: *mut sgx_status_t,
+		w_url: *const u8,
+		w_url_size: u32,
+		quote: *const u8,
+		quote_size: u32,
+		unchecked_extrinsic: *mut u8,
+		unchecked_extrinsic_size: u32,
+	) -> sgx_status_t;
+
 	pub fn init(
 		eid: sgx_enclave_id_t,
 		retval: *mut sgx_status_t,
@@ -115,6 +126,16 @@ extern "C" {
 		quote_size: u32,
 	) -> sgx_status_t;
 
+	pub fn generate_dcap_ra_quote(
+		eid: sgx_enclave_id_t,
+		retval: *mut sgx_status_t,
+		skip_ra: c_int,
+		quoting_enclave_target_info: &sgx_target_info_t,
+		quote_size: u32,
+		dcap_quote_p: *mut u8,
+		dcap_quote_size: u32,
+	) -> sgx_status_t;
+
 	pub fn generate_register_quoting_enclave_extrinsic(
 		eid: sgx_enclave_id_t,
 		retval: *mut sgx_status_t,
@@ -199,4 +220,5 @@ extern "C" {
 		shard_size: u32,
 		skip_ra: c_int,
 	) -> sgx_status_t;
+
 }

core-primitives/enclave-api/src/remote_attestation.rs

@@ -48,6 +48,12 @@ pub trait RemoteAttestation {
 	fn generate_ias_ra_extrinsic(&self, w_url: &str, skip_ra: bool) -> EnclaveResult<Vec<u8>>;
 
 	fn generate_dcap_ra_extrinsic(&self, w_url: &str, skip_ra: bool) -> EnclaveResult<Vec<u8>>;
+	fn generate_dcap_ra_extrinsic_from_quote(
+		&self,
+		url: String,
+		quote: &[u8],
+	) -> EnclaveResult<Vec<u8>>;
+	fn generate_dcap_ra_quote(&self, skip_ra: bool) -> EnclaveResult<Vec<u8>>;
 
 	fn generate_register_quoting_enclave_extrinsic(&self, fmspc: Fmspc) -> EnclaveResult<Vec<u8>>;
 
@@ -145,6 +151,60 @@ impl RemoteAttestation for Enclave {
 
 		Ok(unchecked_extrinsic)
 	}
+	fn generate_dcap_ra_extrinsic_from_quote(
+		&self,
+		url: String,
+		quote: &[u8],
+	) -> EnclaveResult<Vec<u8>> {
+		let mut retval = sgx_status_t::SGX_SUCCESS;
+		let mut unchecked_extrinsic: Vec<u8> = vec![0u8; EXTRINSIC_MAX_SIZE];
+		let url = url.encode();
+
+		let result = unsafe {
+			ffi::generate_dcap_ra_extrinsic_from_quote_internal(
+				self.eid,
+				&mut retval,
+				url.as_ptr(),
+				url.len() as u32,
+				quote.as_ptr(),
+				quote.len() as u32,
+				unchecked_extrinsic.as_mut_ptr(),
+				unchecked_extrinsic.len() as u32,
+			)
+		};
+
+		ensure!(result == sgx_status_t::SGX_SUCCESS, Error::Sgx(result));
+		ensure!(retval == sgx_status_t::SGX_SUCCESS, Error::Sgx(retval));
+
+		Ok(unchecked_extrinsic.to_vec())
+	}
+
+	fn generate_dcap_ra_quote(&self, skip_ra: bool) -> EnclaveResult<Vec<u8>> {
+		let mut retval = sgx_status_t::SGX_SUCCESS;
+		let quoting_enclave_target_info = self.qe_get_target_info()?;
+		let quote_size = self.qe_get_quote_size()?;
+
+		let mut dcap_quote_vec: Vec<u8> = vec![0; quote_size as usize];
+		let (dcap_quote_p, dcap_quote_size) =
+			(dcap_quote_vec.as_mut_ptr(), dcap_quote_vec.len() as u32);
+
+		let result = unsafe {
+			ffi::generate_dcap_ra_quote(
+				self.eid,
+				&mut retval,
+				skip_ra.into(),
+				&quoting_enclave_target_info,
+				quote_size,
+				dcap_quote_p,
+				dcap_quote_size,
+			)
+		};
+
+		ensure!(result == sgx_status_t::SGX_SUCCESS, Error::Sgx(result));
+		ensure!(retval == sgx_status_t::SGX_SUCCESS, Error::Sgx(retval));
+
+		Ok(dcap_quote_vec)
+	}
 
 	fn generate_dcap_ra_extrinsic(&self, w_url: &str, skip_ra: bool) -> EnclaveResult<Vec<u8>> {
 		let mut retval = sgx_status_t::SGX_SUCCESS;
@@ -587,7 +647,32 @@ impl TlsRemoteAttestation for Enclave {
 }
 
 fn create_system_path(file_name: &str) -> String {
-	format!("{}{}{}", OS_SYSTEM_PATH, file_name, C_STRING_ENDING)
+	info!("create_system_path:: file_name={}", &file_name);
+	let default_path = format!("{}{}", OS_SYSTEM_PATH, file_name);
+
+	let full_path = find_library_by_name(file_name).unwrap_or(default_path);
+
+	let c_terminated_path = format!("{}{}", full_path, C_STRING_ENDING);
+	info!("create_system_path:: created path={}", &c_terminated_path);
+	c_terminated_path
+}
+fn find_library_by_name(lib_name: &str) -> Option<String> {
+	use std::process::Command;
+	// ldconfig -p | grep libsgx_pce_logic.so.1
+
+	let ldconfig_output = Command::new("ldconfig").args(["-p"]).output().ok()?;
+	let possible_path = String::from_utf8(ldconfig_output.stdout)
+		.ok()?
+		.lines()
+		.filter(|line| line.contains(lib_name))
+		.map(|lib_name_and_path| {
+			lib_name_and_path
+				.rsplit_once("=>")
+				.map(|(_, lib_path)| lib_path.trim().to_owned())
+		})
+		.next()?;
+
+	possible_path
 }
 
 fn set_ql_path(path_type: sgx_ql_path_type_t, path: &str) -> EnclaveResult<()> {

core/rest-client/src/rest_client.rs

@@ -18,14 +18,16 @@
 #[cfg(all(not(feature = "std"), feature = "sgx"))]
 use crate::sgx_reexport_prelude::*;
 
+pub use http_req::{request::Method, response::Headers};
+pub use url::Url;
+
 use crate::{
 	error::Error, http_client::SendHttpRequest, Query, RestDelete, RestGet, RestPatch, RestPath,
 	RestPost, RestPut,
 };
-use http_req::{request::Method, response::Headers};
+
 use log::*;
 use std::string::{String, ToString};
-use url::Url;
 
 /// REST client to make HTTP GET and POST requests.
 pub struct RestClient<H> {

enclave-runtime/Cargo.lock

@@ -101,7 +101,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "fcb51a0695d8f838b1ee009b3fbf66bda078cd64590202a864a8f3e8c4315c47"
 dependencies = [
  "getrandom 0.2.3",
- "once_cell 1.17.0",
+ "once_cell 1.17.1",
  "version_check",
 ]
 
@@ -2556,7 +2556,7 @@ dependencies = [
  "mio",
  "sgx_tstd",
  "sgx_types",
- "slab 0.4.7",
+ "slab 0.4.8",
 ]
 
 [[package]]
@@ -2715,9 +2715,9 @@ dependencies = [
 
 [[package]]
 name = "once_cell"
-version = "1.17.0"
+version = "1.17.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6f61fba1741ea2b3d6a1e3178721804bb716a68a6aeba1149b5d52e3d464ea66"
+checksum = "b7e5500299e16ebb147ae15a00a942af264cf3688f47923b8fc2cd5858f23ad3"
 
 [[package]]
 name = "opaque-debug"
@@ -2822,7 +2822,7 @@ dependencies = [
 [[package]]
 name = "pallet-parentchain"
 version = "0.9.0"
-source = "git+https://github.com/integritee-network/pallets.git?branch=polkadot-v0.9.37#50cac490de02a6484751c193da9f8080477b885c"
+source = "git+https://github.com/integritee-network/pallets.git?branch=polkadot-v0.9.37#824c9a50dd8902697bd3e75ab6b5f7c3d663167f"
 dependencies = [
  "frame-support",
  "frame-system",
@@ -3028,7 +3028,7 @@ version = "1.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "66618389e4ec1c7afe67d51a9bf34ff9236480f8d51e7489b7d5ab0303c13f34"
 dependencies = [
- "once_cell 1.17.0",
+ "once_cell 1.17.1",
  "toml_edit",
 ]
 
@@ -3838,9 +3838,9 @@ dependencies = [
 
 [[package]]
 name = "slab"
-version = "0.4.7"
+version = "0.4.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4614a76b2a8be0058caa9dbbaf66d988527d86d003c11a94fbd335d7661edcef"
+checksum = "6528351c9bc8ab22353f9d776db39a20288e8d6c37ef8cfe3317cf875eecfc2d"
 dependencies = [
  "autocfg 1.1.0",
 ]

enclave-runtime/Enclave.edl

@@ -88,6 +88,18 @@ enclave {
 			[out, size=unchecked_extrinsic_size] uint8_t* unchecked_extrinsic, uint32_t unchecked_extrinsic_size,
 			int skip_ra
 		);
+		public sgx_status_t generate_dcap_ra_quote(
+			int skip_ra,
+			[in] const sgx_target_info_t* quoting_enclave_target_info,
+			uint32_t quote_size,
+			[out, size=dcap_quote_size] uint8_t* dcap_quote_p, uint32_t dcap_quote_size
+		);
+
+		public sgx_status_t generate_dcap_ra_extrinsic_from_quote_internal(
+			[in, size=w_url_size] uint8_t* w_url, uint32_t w_url_size,
+			[in, size=quote_size] uint8_t* quote, uint32_t quote_size,
+			[out, size=unchecked_extrinsic_size] uint8_t* unchecked_extrinsic, uint32_t unchecked_extrinsic_size
+		);
 
 		public sgx_status_t generate_dcap_ra_extrinsic(
 			[in, size=w_url_size] uint8_t* w_url, uint32_t w_url_size,

enclave-runtime/src/attestation.rs

@@ -163,7 +163,7 @@ pub unsafe extern "C" fn generate_dcap_ra_extrinsic(
 	sgx_status_t::SGX_SUCCESS
 }
 
-fn generate_dcap_ra_extrinsic_internal(
+pub fn generate_dcap_ra_extrinsic_internal(
 	url: String,
 	skip_ra: bool,
 	quoting_enclave_target_info: &sgx_target_info_t,
@@ -177,7 +177,6 @@ fn generate_dcap_ra_extrinsic_internal(
 		skip_ra,
 	)?;
 
-	// TODO Need to send this to the teerex pallet (something similar to perform_ra_internal)
 	let extrinsics_factory = get_extrinsic_factory_from_solo_or_parachain()?;
 	let node_metadata_repo = get_node_metadata_repository_from_solo_or_parachain()?;
 
@@ -191,6 +190,102 @@ fn generate_dcap_ra_extrinsic_internal(
 	Ok(extrinsic[0].clone())
 }
 
+#[no_mangle]
+pub unsafe extern "C" fn generate_dcap_ra_quote(
+	skip_ra: c_int,
+	quoting_enclave_target_info: &sgx_target_info_t,
+	quote_size: u32,
+	dcap_quote_p: *mut u8,
+	dcap_quote_size: u32,
+) -> sgx_status_t {
+	if dcap_quote_p.is_null() {
+		return sgx_status_t::SGX_ERROR_INVALID_PARAMETER
+	}
+	let dcap_quote = match generate_dcap_ra_quote_internal(
+		skip_ra == 1,
+		quoting_enclave_target_info,
+		quote_size,
+	) {
+		Ok(dcap_quote) => dcap_quote,
+		Err(e) => return e.into(),
+	};
+
+	let dcap_quote_slice = slice::from_raw_parts_mut(dcap_quote_p, dcap_quote_size as usize);
+
+	if let Err(e) = write_slice_and_whitespace_pad(dcap_quote_slice, dcap_quote) {
+		return EnclaveError::Other(Box::new(e)).into()
+	};
+
+	sgx_status_t::SGX_SUCCESS
+}
+
+pub fn generate_dcap_ra_quote_internal(
+	skip_ra: bool,
+	quoting_enclave_target_info: &sgx_target_info_t,
+	quote_size: u32,
+) -> EnclaveResult<Vec<u8>> {
+	let attestation_handler = GLOBAL_ATTESTATION_HANDLER_COMPONENT.get()?;
+
+	let (_, dcap_quote) = attestation_handler.generate_dcap_ra_cert(
+		quoting_enclave_target_info,
+		quote_size,
+		skip_ra,
+	)?;
+
+	Ok(dcap_quote)
+}
+
+#[no_mangle]
+pub unsafe extern "C" fn generate_dcap_ra_extrinsic_from_quote_internal(
+	w_url: *const u8,
+	w_url_size: u32,
+	quote: *const u8,
+	quote_size: u32,
+	unchecked_extrinsic: *mut u8,
+	unchecked_extrinsic_size: u32,
+) -> sgx_status_t {
+	if w_url.is_null() || unchecked_extrinsic.is_null() {
+		return sgx_status_t::SGX_ERROR_INVALID_PARAMETER
+	}
+	let mut url_slice = slice::from_raw_parts(w_url, w_url_size as usize);
+	let url = String::decode(&mut url_slice).expect("Could not decode url slice to a valid String");
+
+	let extrinsic_slice =
+		slice::from_raw_parts_mut(unchecked_extrinsic, unchecked_extrinsic_size as usize);
+
+	let quote_slice = slice::from_raw_parts(quote, quote_size as usize);
+
+	let extrinsic = match generate_dcap_ra_extrinsic_from_quote(url, quote_slice) {
+		Ok(xt) => xt,
+		Err(e) => return e.into(),
+	};
+
+	if let Err(e) = write_slice_and_whitespace_pad(extrinsic_slice, extrinsic.encode()) {
+		return EnclaveError::Other(Box::new(e)).into()
+	};
+	sgx_status_t::SGX_SUCCESS
+}
+
+pub fn generate_dcap_ra_extrinsic_from_quote(
+	url: String,
+	quote: &[u8],
+) -> EnclaveResult<OpaqueExtrinsic> {
+	let extrinsics_factory = get_extrinsic_factory_from_solo_or_parachain()?;
+	let node_metadata_repo = get_node_metadata_repository_from_solo_or_parachain()?;
+	info!("    [Enclave] Compose register enclave gettins callIDs:");
+
+	let call_ids = node_metadata_repo
+		.get_from_metadata(|m| m.register_dcap_enclave_call_indexes())?
+		.map_err(MetadataProviderError::MetadataError)?;
+	info!("    [Enclave] Compose register enclave call DCAP IDs: {:?}", call_ids);
+	let call = OpaqueCall::from_tuple(&(call_ids, quote, url));
+	info!("    [Enclave] Compose register enclave got call: {:#?}", &call);
+
+	let extrinsic = extrinsics_factory.create_extrinsics(&[call], None)?;
+	info!("    [Enclave] Compose register enclave got extrinsic, returning");
+	Ok(extrinsic[0].clone())
+}
+
 fn generate_ias_ra_extrinsic_internal(
 	url: String,
 	skip_ra: bool,