Guilhem Bryant comments

Results 30 comments of


                                            Guilhem Bryant

Plumb Mbed TLS' RNG into Veracruz's platform services

> The man page seems to state that that cannot happen The man page mentions several times the case where "no random bytes are available", so I'd say that can...

Plumb Mbed TLS' RNG into Veracruz's platform services

Not anymore

Restore RNG workaround for Nitro and add security disclaimer

TODO: Rebase when rust-mbedtls is in a stable state

Replace `println!` with log functions (`info!`, `warn!`, etc)

When running VOD with log level set to info, I'm getting a log over 15K lines. I'd suggest we replace `info!` with `debug!` or `trace!` for most debug messages that...

Add AWS Nitro Enclaves test execution to the CI system

Done in https://github.com/veracruz-project/veracruz/pull/258 and superseded by https://github.com/veracruz-project/veracruz/issues/514

Start running Nitro tests in the CI

We could also deploy VOD on Nitro. Cf. https://github.com/veracruz-project/veracruz/pull/597 Some ideas: - how to SSH securely + store client's private key & server's IP addr in "github secrets" + pin...

Need to enable the CI to actually run the tests on Nitro Enclaves

Duplicate of #514?

Better document freestanding execution engine and policy format

Relates to https://github.com/veracruz-project/veracruz/issues/77

Add VOD example to CI

Implemented for VC-Linux and freestanding execution engine in https://github.com/veracruz-project/veracruz/pull/597

Requesting a nonexistent file generates a `Length prefix missing` error on Veracruz-Client

I agree that the protocol buffer handling should be transparent to the invoker. Just saying a FS-related error shouldn't propagate to the TLS layer. Additionally, for security reasons, we should...