[WIP] Intel Trust Authority GA Integration

Open AI-Memory opened this issue 2 years ago • 1 comments
This PR is used for ITA integration.
This change is
Sep 21 '23 17:09 AI-Memory
I ran the amber example in my system and observed memory fault. Here is the complete debug log.
~/gramine-ITA/CI-Examples/amber$ gramine-sgx app
Gramine is starting. Parsing TOML manifest file, this may take some time...
(host_main.c:967:load_enclave) debug: Gramine parsed TOML manifest file successfully
(host_framework.c:225:create_enclave) debug: Enclave created:
(host_framework.c:226:create_enclave) debug:     base:           0x0000000000000000
(host_framework.c:227:create_enclave) debug:     size:           0x0000000100000000
(host_framework.c:228:create_enclave) debug:     misc_select:    0x00000001
(host_framework.c:229:create_enclave) debug:     attr.flags:     0x0000000000000007
(host_framework.c:230:create_enclave) debug:     attr.xfrm:      0x00000000000600e7
(host_framework.c:231:create_enclave) debug:     ssa_frame_size: 4
(host_framework.c:232:create_enclave) debug:     isv_prod_id:    0x00000000
(host_framework.c:233:create_enclave) debug:     isv_svn:        0x00000000
(host_main.c:480:initialize_enclave) debug: Adding pages to SGX enclave, this may take some time...
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffffd000-0x100000000 [REG:R--] (manifest) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xfff7d000-0xffffd000 [REG:RW-] (ssa) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xfff6d000-0xfff7d000 [TCS:---] (tcs) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xfff5d000-0xfff6d000 [REG:RW-] (tls) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xfff1d000-0xfff5d000 [REG:RW-] (stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffedd000-0xfff1d000 [REG:RW-] (stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffe9d000-0xffedd000 [REG:RW-] (stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffe5d000-0xffe9d000 [REG:RW-] (stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffe1d000-0xffe5d000 [REG:RW-] (stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffddd000-0xffe1d000 [REG:RW-] (stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffd9d000-0xffddd000 [REG:RW-] (stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffd5d000-0xffd9d000 [REG:RW-] (stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffd1d000-0xffd5d000 [REG:RW-] (stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffcdd000-0xffd1d000 [REG:RW-] (stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffc9d000-0xffcdd000 [REG:RW-] (stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffc5d000-0xffc9d000 [REG:RW-] (stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffc1d000-0xffc5d000 [REG:RW-] (stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffbdd000-0xffc1d000 [REG:RW-] (stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffb9d000-0xffbdd000 [REG:RW-] (stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffb5d000-0xffb9d000 [REG:RW-] (stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffb4d000-0xffb5d000 [REG:RW-] (sig_stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffb3d000-0xffb4d000 [REG:RW-] (sig_stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffb2d000-0xffb3d000 [REG:RW-] (sig_stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffb1d000-0xffb2d000 [REG:RW-] (sig_stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffb0d000-0xffb1d000 [REG:RW-] (sig_stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffafd000-0xffb0d000 [REG:RW-] (sig_stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffaed000-0xffafd000 [REG:RW-] (sig_stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffadd000-0xffaed000 [REG:RW-] (sig_stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffacd000-0xffadd000 [REG:RW-] (sig_stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffabd000-0xffacd000 [REG:RW-] (sig_stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffaad000-0xffabd000 [REG:RW-] (sig_stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffa9d000-0xffaad000 [REG:RW-] (sig_stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffa8d000-0xffa9d000 [REG:RW-] (sig_stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffa7d000-0xffa8d000 [REG:RW-] (sig_stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffa6d000-0xffa7d000 [REG:RW-] (sig_stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffa5d000-0xffa6d000 [REG:RW-] (sig_stack) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xff9ad000-0xffa4d000 [REG:R-X] (code) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffa4d000-0xffa57000 [REG:RW-] (data) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0xffa57000-0xffa5d000 [REG:RW-] (bss) measured
(host_framework.c:313:add_pages_to_enclave) debug: Adding pages to enclave: 0x10000-0xff9ad000 [REG:RWX] (free)
(host_main.c:562:initialize_enclave) debug: Added all pages to SGX enclave
(host_framework.c:516:init_enclave) debug: Enclave initializing:
(host_framework.c:517:init_enclave) debug:     enclave id:   0x00000000fffff000
(host_framework.c:518:init_enclave) debug:     mr_enclave:   b8ff3eda4401f84ccc37639a470bdfc30c538d93a56be559ac5782de9dc80e2d
(host_main.c:1039:load_enclave) debug: Using SGX attestation type "dcap"
-----------------------------------------------------------------------------------------------------------------------
Gramine detected the following insecure configurations:

  - sgx.debug = true                           (this is a debug enclave)
  - loader.log_level = warning|debug|trace|all (verbose log level, may leak information)
  - loader.insecure__use_cmdline_argv = true   (forwarding command-line args from untrusted host to the app)
  - sgx.allowed_files = [ ... ]                (some files are passed through from untrusted host without verification)

Gramine will continue application execution, but this configuration must not be used in production!
-----------------------------------------------------------------------------------------------------------------------

(libos_init.c:382:libos_init) debug: Gramine was built from commit: 0afcf20a41c1a1f8488459d716f0734ddebed59b
(libos_init.c:384:libos_init) debug: Host: Linux-SGX
(libos_context.c:70:libos_xstate_init) debug: LibOS xsave_enabled 1, xsave_size 0x2b00(11008), xsave_features 0x600e7
(libos_vma.c:614:init_vma) debug: Initial VMA region 0xff99c000-0xff9ad000 (PAL internal me) bookkeeped
(libos_vma.c:614:init_vma) debug: Initial VMA region 0xff99b000-0xff99c000 (PAL internal me) bookkeeped
(libos_vma.c:614:init_vma) debug: Initial VMA region 0xff99a000-0xff99b000 (PAL internal me) bookkeeped
(libos_vma.c:614:init_vma) debug: Initial VMA region 0xff999000-0xff99a000 (PAL internal me) bookkeeped
(libos_vma.c:614:init_vma) debug: Initial VMA region 0xff998000-0xff999000 (PAL internal me) bookkeeped
(libos_vma.c:614:init_vma) debug: Initial VMA region 0xff997000-0xff998000 (PAL internal me) bookkeeped
(libos_vma.c:614:init_vma) debug: Initial VMA region 0xff995000-0xff997000 (PAL internal me) bookkeeped
(libos_vma.c:614:init_vma) debug: Initial VMA region 0xff994000-0xff995000 (PAL internal me) bookkeeped
(libos_vma.c:614:init_vma) debug: Initial VMA region 0xff992000-0xff994000 (PAL internal me) bookkeeped
(libos_vma.c:614:init_vma) debug: Initial VMA region 0xff991000-0xff992000 (PAL internal me) bookkeeped
(libos_vma.c:614:init_vma) debug: Initial VMA region 0xff98e000-0xff991000 (PAL internal me) bookkeeped
(libos_vma.c:614:init_vma) debug: Initial VMA region 0xff98b000-0xff98e000 (PAL internal me) bookkeeped
(libos_vma.c:614:init_vma) debug: Initial VMA region 0xff989000-0xff98b000 (PAL internal me) bookkeeped
(libos_vma.c:614:init_vma) debug: Initial VMA region 0xff985000-0xff989000 (PAL internal me) bookkeeped
(libos_vma.c:614:init_vma) debug: Initial VMA region 0xff982000-0xff985000 (PAL internal me) bookkeeped
(libos_vma.c:614:init_vma) debug: Initial VMA region 0xff980000-0xff982000 (PAL internal me) bookkeeped
(libos_vma.c:614:init_vma) debug: Initial VMA region 0xff97d000-0xff980000 (PAL internal me) bookkeeped
(libos_vma.c:614:init_vma) debug: Initial VMA region 0xff97c000-0xff97d000 (PAL internal me) bookkeeped
(libos_vma.c:614:init_vma) debug: Initial VMA region 0xff828000-0xff977000 (PAL internal me) bookkeeped
(libos_vma.c:645:init_vma) debug: ASLR top address adjusted to 0xc9f5d000
(amber.c:1103:init_amber) debug: Initializing Amber.
(amber.c:261:amber_status_write) debug: prefix length: 7
(amber.c:254:set_amber_status) debug: <<< set_amber_status: [INFO] uninitialized
 : sz: 21
(amber.c:254:set_amber_status) debug: >>> set_amber_status: [INFO] uninitialized
 : sz: 21
(amber.c:296:init_amber_client) debug: ########### Initializing Amber client ###############
(amber.c:349:init_amber_client) debug: Amber default values:
amber_ip: 52.20.94.116
amber_url: https://api.trustauthority.intel.com/appraisal/v1/
amber_apikey: aeKQBT22ux7tZVB1uLyQN58Z1M9J0Bwg8LAQgLpl
(amber.c:243:set_amber_endpoint_ip) debug: <<< set_amber_endpoint_ip: 52.20.94.116 : sz: 12
(amber.c:243:set_amber_endpoint_ip) debug: >>> set_amber_endpoint_ip: 52.20.94.116 : sz: 12
(amber.c:244:set_amber_endpoint_url) debug: <<< set_amber_endpoint_url: https://api.trustauthority.intel.com/appraisal/v1/ : sz: 50
(amber.c:244:set_amber_endpoint_url) debug: >>> set_amber_endpoint_url: https://api.trustauthority.intel.com/appraisal/v1/ : sz: 50
(amber.c:247:set_amber_endpoint_apikey) debug: <<< set_amber_endpoint_apikey: aeKQBT22ux7tZVB1uLyQN58Z1M9J0Bwg8LAQgLpl : sz: 40
(amber.c:247:set_amber_endpoint_apikey) debug: >>> set_amber_endpoint_apikey: aeKQBT22ux7tZVB1uLyQN58Z1M9J0Bwg8LAQgLpl : sz: 40
(amber.c:250:set_amber_userdata) debug: <<< set_amber_userdata: a dummy user data : sz: 17
(amber.c:250:set_amber_userdata) debug: >>> set_amber_userdata: a dummy user data : sz: 17
(amber.c:252:set_amber_token) debug: <<< set_amber_token:  : sz: 0
(amber.c:252:set_amber_token) debug: >>> set_amber_token:  : sz: 0
(amber.c:253:set_amber_secret) debug: <<< set_amber_secret:  : sz: 0
(amber.c:253:set_amber_secret) debug: >>> set_amber_secret:  : sz: 0
(amber.c:249:set_amber_renew) debug: <<< set_amber_renew:  : sz: 0
(amber.c:249:set_amber_renew) debug: >>> set_amber_renew:  : sz: 0
(amber.c:261:amber_status_write) debug: prefix length: 7
(amber.c:254:set_amber_status) debug: <<< set_amber_status: [INFO] initialized
 : sz: 19
(amber.c:254:set_amber_status) debug: >>> set_amber_status: [INFO] initialized
 : sz: 19
(amber.c:176:log_global_vars) debug: g_amber_endpoint_ip sz: 12 = 52.20.94.116
(amber.c:177:log_global_vars) debug: g_amber_endpoint_url sz: 50 = https://api.trustauthority.intel.com/appraisal/v1/
(amber.c:178:log_global_vars) debug: g_amber_kbs_ip sz: 0 =
(amber.c:179:log_global_vars) debug: g_amber_kbs_url sz: 0 =
(amber.c:180:log_global_vars) debug: g_amber_endpoint_apikey sz: 40 = aeKQBT22ux7tZVB1uLyQN58Z1M9J0Bwg8LAQgLpl
(amber.c:182:log_global_vars) debug: g_amber_kbs_keyid sz: 0 =
(amber.c:183:log_global_vars) debug: g_amber_renew sz: 0 =
(amber.c:184:log_global_vars) debug: g_amber_userdata sz: 17 = a dummy user data
(amber.c:185:log_global_vars) debug: g_amber_quote sz: 0
(amber.c:186:log_global_vars) debug: g_amber_token sz: 0 =
(amber.c:187:log_global_vars) debug: g_amber_secret sz: 0 =
(amber.c:188:log_global_vars) debug: g_amber_status sz: 19 = [INFO] initialized

(amber.c:189:log_global_vars) debug: g_amber_cacerts sz: 0 =
(amber.c:1111:init_amber) host is Linux-SGX, adding SGX-specific /dev/amber pseudo files: endpoint_url, token, etc.
(libos_fs_encrypted.c:398:get_or_create_encrypted_files_key) debug: Successfully retrieved special key "_sgx_mrenclave"
(libos_fs_encrypted.c:398:get_or_create_encrypted_files_key) debug: Successfully retrieved special key "_sgx_mrsigner"
(attestation.c:374:init_sgx_attestation) debug: host is Linux-SGX and remote attestation type is 'dcap', adding /dev/attestation/quote file
(libos_init.c:410:libos_init) debug: LibOS loaded at 0xff828000, ready to initialize
(libos_init.c:561:create_pipe) debug: Creating pipe: pipe.srv:27c9538637c9f509279677deb2b2a9bee2e12a1cc10b55382d15e7bafce7aae5
(libos_fs.c:525:mount_fs) [P1:T1:] debug: mounting "file:." (chroot) under /
(libos_fs.c:525:mount_fs) [P1:T1:] debug: mounting "proc" (pseudo) under /proc
(libos_fs.c:525:mount_fs) [P1:T1:] debug: mounting "dev" (pseudo) under /dev
(libos_fs.c:525:mount_fs) [P1:T1:] debug: mounting "dev:tty" (chroot) under /dev/tty
(libos_fs.c:525:mount_fs) [P1:T1:] debug: mounting "sys" (pseudo) under /sys
(libos_fs.c:525:mount_fs) [P1:T1:] debug: mounting "file:/usr/local/lib/x86_64-linux-gnu/gramine/runtime/glibc" (chroot) under /lib
(libos_fs.c:525:mount_fs) [P1:T1:] debug: mounting "file:/etc" (chroot) under /etc
(libos_init.c:561:create_pipe) [P1:T1:app] debug: Creating pipe: pipe.srv:177837e7bef7ef44962cc353f6a40dfce4ba9fa98c2be8254883130bda18aa0b
(libos_init.c:303:init_stack) [P1:T1:app] debug: Allocated stack at 0xc9f1d000 (size = 0x40000)
(libos_rtld.c:844:load_elf_object) [P1:T1:app] debug: loading "file:./app"
(libos_debug.c:121:append_r_debug) [P1:T1:app] debug: adding file:./app at 0xc9f17000
(libos_rtld.c:898:find_interp) [P1:T1:app] debug: searching for interpreter: /lib/ld-linux-x86-64.so.2
(libos_rtld.c:844:load_elf_object) [P1:T1:app] debug: loading "file:/usr/local/lib/x86_64-linux-gnu/gramine/runtime/glibc/ld-linux-x86-64.so.2"
(libos_debug.c:121:append_r_debug) [P1:T1:app] debug: adding file:/usr/local/lib/x86_64-linux-gnu/gramine/runtime/glibc/ld-linux-x86-64.so.2 at 0xc9ee2000
(libos_init.c:561:create_pipe) [P1:T1:app] debug: Creating pipe: pipe.srv:12431139248186377582/1
(libos_init.c:561:create_pipe) [P1:T1:app] debug: Creating pipe: pipe.srv:370526b077417714f494144e94e4b93d9e7386ece2b9fc636a27035b6ff249ea
(libos_init.c:505:libos_init) [P1:T1:app] debug: LibOS initialized
(libos_ipc_worker.c:372:ipc_worker_wrapper) [P1:libos] debug: IPC worker started
(libos_debug.c:121:append_r_debug) [P1:T1:app] debug: adding file:[vdso_libos] at 0xc9ee1000
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- brk(0) = 0xcb7ca000
(libos_arch_prctl.c:81:libos_syscall_arch_prctl) [P1:T1:app] warning: Not supported flag (0x3001) passed to arch_prctl
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- arch_prctl(12289, 0xc9f5cd50) = -38
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- mmap(0, 0x2000, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0x0) ...
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- return from mmap(...) = 0xc9edf000
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- access("/etc/ld.so.preload", F_OK|X_OK) = -2
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- openat(AT_FDCWD, "/lib/glibc-hwcaps/x86-64-v4/libc.so.6", O_RDONLY|0x80000, 0000) = -2
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- newfstatat(AT_FDCWD, "/lib/glibc-hwcaps/x86-64-v4", 0xc9f5bf90, 0) = -2
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- openat(AT_FDCWD, "/lib/glibc-hwcaps/x86-64-v3/libc.so.6", O_RDONLY|0x80000, 0000) = -2
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- newfstatat(AT_FDCWD, "/lib/glibc-hwcaps/x86-64-v3", 0xc9f5bf90, 0) = -2
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- openat(AT_FDCWD, "/lib/glibc-hwcaps/x86-64-v2/libc.so.6", O_RDONLY|0x80000, 0000) = -2
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- newfstatat(AT_FDCWD, "/lib/glibc-hwcaps/x86-64-v2", 0xc9f5bf90, 0) = -2
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- openat(AT_FDCWD, "/lib/libc.so.6", O_RDONLY|0x80000, 0000) = 0x3
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- read(3, 0xc9f5c0f8, 0x340) ...
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- return from read(...) = 0x340
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- pread64(3, 0xc9f5bb50, 0x310, 0x40) ...
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- return from pread64(...) = 0x310
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- newfstatat(3, "", 0xc9f5bf90, 4096) = 0x0
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- pread64(3, 0xc9f5bbd0, 0x310, 0x40) ...
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- return from pread64(...) = 0x310
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- mmap(0, 0x1d0d30, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0x0) ...
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- return from mmap(...) = 0xc9d0e000
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- mmap(0xc9d30000, 0x14c000, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) ...
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- return from mmap(...) = 0xc9d30000
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- mmap(0xc9e7c000, 0x55000, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x16e000) ...
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- return from mmap(...) = 0xc9e7c000
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- mmap(0xc9ed1000, 0x6000, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1c2000) ...
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- return from mmap(...) = 0xc9ed1000
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- mmap(0xc9ed7000, 0x7d30, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED, -1, 0x0) ...
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- return from mmap(...) = 0xc9ed7000
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- close(3) = 0x0
(libos_rtld.c:1044:register_library) [P1:T1:app] debug: glibc register library /lib/libc.so.6 loaded at 0xc9d0e000
(libos_debug.c:121:append_r_debug) [P1:T1:app] debug: adding file:/usr/local/lib/x86_64-linux-gnu/gramine/runtime/glibc/libc.so.6 at 0xc9d0e000
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- mmap(0, 0x3000, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0x0) ...
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- return from mmap(...) = 0xc9d0b000
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- arch_prctl(4098, 0xc9d0b740) = 0x0
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- set_tid_address(0xc9d0ba10) = 0x1
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- set_robust_list(0xc9d0ba20, 0x18) = 0x0
(libos_parser.c:1617:warn_unsupported_syscall) [P1:T1:app] warning: Unsupported system call rseq
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- mprotect(0xc9ed1000, 0x4000, PROT_READ) ...
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- return from mprotect(...) = 0x0
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- mprotect(0xc9f1a000, 0x1000, PROT_READ) ...
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- return from mprotect(...) = 0x0
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- mprotect(0xc9f13000, 0x2000, PROT_READ) ...
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- return from mprotect(...) = 0x0
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- prlimit64(0, 3, 0, 0xc9f5cae0) = 0x0
(amber.c:176:log_global_vars) [P1:T1:app] debug: g_amber_endpoint_ip sz: 12 = 52.20.94.116
(amber.c:177:log_global_vars) [P1:T1:app] debug: g_amber_endpoint_url sz: 50 = https://api.trustauthority.intel.com/appraisal/v1/
(amber.c:178:log_global_vars) [P1:T1:app] debug: g_amber_kbs_ip sz: 0 =
(amber.c:179:log_global_vars) [P1:T1:app] debug: g_amber_kbs_url sz: 0 =
(amber.c:180:log_global_vars) [P1:T1:app] debug: g_amber_endpoint_apikey sz: 40 = aeKQBT22ux7tZVB1uLyQN58Z1M9J0Bwg8LAQgLpl
(amber.c:182:log_global_vars) [P1:T1:app] debug: g_amber_kbs_keyid sz: 0 =
(amber.c:183:log_global_vars) [P1:T1:app] debug: g_amber_renew sz: 0 =
(amber.c:184:log_global_vars) [P1:T1:app] debug: g_amber_userdata sz: 17 = a dummy user data
(amber.c:185:log_global_vars) [P1:T1:app] debug: g_amber_quote sz: 0
(amber.c:186:log_global_vars) [P1:T1:app] debug: g_amber_token sz: 0 =
(amber.c:187:log_global_vars) [P1:T1:app] debug: g_amber_secret sz: 0 =
(amber.c:188:log_global_vars) [P1:T1:app] debug: g_amber_status sz: 19 = [INFO] initialized

(amber.c:189:log_global_vars) [P1:T1:app] debug: g_amber_cacerts sz: 0 =
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- openat(AT_FDCWD, "/dev/amber/userdata", O_WRONLY, 0000) = 0x3
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- write(3, 0xc9f19058, 0x38) ...
(amber.c:250:set_amber_userdata) [P1:T1:app] debug: <<< set_amber_userdata: {"type":"RSA", "key":"RHVtbXkga2V5IChkb250IHVzZSBpdCkK"} : sz: 56
(amber.c:250:set_amber_userdata) [P1:T1:app] debug: >>> set_amber_userdata: {"type":"RSA", "key":"RHVtbXkga2V5IChkb250IHVzZSBpdCkK"} : sz: 56
(amber.c:261:amber_status_write) [P1:T1:app] debug: prefix length: 7
(amber.c:254:set_amber_status) [P1:T1:app] debug: <<< set_amber_status: [INFO] userdata saved
 : sz: 22
(amber.c:254:set_amber_status) [P1:T1:app] debug: >>> set_amber_status: [INFO] userdata saved
 : sz: 22
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- return from write(...) = 0x38
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- close(3) = 0x0
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- newfstatat(1, "", 0xc9f5aa40, 4096) = 0x0
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- ioctl(1, TCGETS, 0xc9f5a9b0) ...
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- return from ioctl(...) = -38
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- getrandom(0xc9edc498, 0x8, GRND_NONBLOCK) = 0x8
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- brk(0) = 0xcb7ca000
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- brk(0xcb7eb000) = 0xcb7eb000
(amber.c:176:log_global_vars) [P1:T1:app] debug: g_amber_endpoint_ip sz: 12 = 52.20.94.116
(amber.c:177:log_global_vars) [P1:T1:app] debug: g_amber_endpoint_url sz: 50 = https://api.trustauthority.intel.com/appraisal/v1/
(amber.c:178:log_global_vars) [P1:T1:app] debug: g_amber_kbs_ip sz: 0 =
(amber.c:179:log_global_vars) [P1:T1:app] debug: g_amber_kbs_url sz: 0 =
(amber.c:180:log_global_vars) [P1:T1:app] debug: g_amber_endpoint_apikey sz: 40 = aeKQBT22ux7tZVB1uLyQN58Z1M9J0Bwg8LAQgLpl
(amber.c:182:log_global_vars) [P1:T1:app] debug: g_amber_kbs_keyid sz: 0 =
(amber.c:183:log_global_vars) [P1:T1:app] debug: g_amber_renew sz: 0 =
(amber.c:184:log_global_vars) [P1:T1:app] debug: g_amber_userdata sz: 56 = {"type":"RSA", "key":"RHVtbXkga2V5IChkb250IHVzZSBpdCkK"}
(amber.c:185:log_global_vars) [P1:T1:app] debug: g_amber_quote sz: 0
(amber.c:186:log_global_vars) [P1:T1:app] debug: g_amber_token sz: 0 =
(amber.c:187:log_global_vars) [P1:T1:app] debug: g_amber_secret sz: 0 =
(amber.c:188:log_global_vars) [P1:T1:app] debug: g_amber_status sz: 22 = [INFO] userdata saved

(amber.c:189:log_global_vars) [P1:T1:app] debug: g_amber_cacerts sz: 0 =
(https.c:578:https_init) [P1:T1:app] debug: https_init
(amber.c:453:amber_http_get) [P1:T1:app] debug: HTTP GET (52.20.94.116): https://api.trustauthority.intel.com/appraisal/v1/nonce with apikey: aeKQBT22ux7tZVB1uLyQN58Z1M9J0Bwg8LAQgLpl
(https.c:894:http_get) [P1:T1:app] debug: http_get: https://api.trustauthority.intel.com/appraisal/v1/nonce
(https.c:257:parse_url) [P1:T1:app] debug: parse_url: src_url: https://api.trustauthority.intel.com/appraisal/v1/nonce
(https.c:271:parse_url) [P1:T1:app] debug: parse_url <1, api.trustauthority.intel.com/appraisal/v1/nonce>:2
(https.c:126:strstr_alt) [P1:T1:app] debug: strstr_alt: api.trustauthority.intel.com/appraisal/v1/nonce, /
(https.c:135:strstr_alt) [P1:T1:app] debug: strstr_alt(2): /appraisal/v1/nonce, /
(https.c:143:strstr_alt) [P1:T1:app] debug: strstr_alt(3): /appraisal/v1/nonce, /
(https.c:140:strstr_alt) [P1:T1:app] debug: strstr_alt(3.0): /appraisal/v1/nonce, /
(https.c:276:parse_url) [P1:T1:app] debug: parse_url </appraisal/v1/nonce, api.trustauthority.intel.com/appraisal/v1/nonce>:3
(https.c:278:parse_url) [P1:T1:app] debug: parse_url <api.trustauthority.intel.com, api.trustauthority.intel.com/appraisal/v1/nonce>:4
(https.c:126:strstr_alt) [P1:T1:app] debug: strstr_alt: api.trustauthority.intel.com, :
(https.c:152:strstr_alt) [P1:T1:app] debug: strstr_alt(4): , :
(https.c:288:parse_url) [P1:T1:app] debug: PARSE URL: host:api.trustauthority.intel.com, port:443, path:/appraisal/v1/nonce
(https.c:896:http_get) [P1:T1:app] debug: http_get: 1, api.trustauthority.intel.com 443 /appraisal/v1/nonce
(https.c:672:mbedtls_pal_connect) [P1:T1:app] debug: mbedtls_pal_connect: tcp:52.20.94.116:443
(https.c:81:send_cb) [P1:T1:app] debug: *****  send_cb: 157
(https.c:91:send_cb) [P1:T1:app] debug: send_cb: 157
(https.c:107:send_cb) [P1:T1:app] debug: send_cb count: 157
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 5
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 5
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 95
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 95
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 5
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 5
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 4928
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 3867
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 1061
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 1061
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 5
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 5
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 333
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 333
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 5
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 5
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 4
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 4
(https.c:81:send_cb) [P1:T1:app] debug: *****  send_cb: 75
(https.c:91:send_cb) [P1:T1:app] debug: send_cb: 75
(https.c:107:send_cb) [P1:T1:app] debug: send_cb count: 75
(https.c:81:send_cb) [P1:T1:app] debug: *****  send_cb: 6
(https.c:91:send_cb) [P1:T1:app] debug: send_cb: 6
(https.c:107:send_cb) [P1:T1:app] debug: send_cb count: 6
(https.c:81:send_cb) [P1:T1:app] debug: *****  send_cb: 45
(https.c:91:send_cb) [P1:T1:app] debug: send_cb: 45
(https.c:107:send_cb) [P1:T1:app] debug: send_cb count: 45
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 5
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 5
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 115
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 115
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 5
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 5
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 1
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 1
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 5
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 5
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 40
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 40
(https.c:921:http_get) [P1:T1:app] debug: GET }▒ HTTP/1.1
User-Agent: Ambergra/0.2
Host: api.trustauthority.intel.com
Accept: application/json
x-api-key: aeKQBT22ux7tZVB1uLyQN58Z1M9J0Bwg8LAQgLpl


(https.c:81:send_cb) [P1:T1:app] debug: *****  send_cb: 189
(https.c:91:send_cb) [P1:T1:app] debug: send_cb: 189
(https.c:107:send_cb) [P1:T1:app] debug: send_cb count: 189
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 5
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 5
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 296
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 296
(https.c:126:strstr_alt) [P1:T1:app] debug: strstr_alt: HTTP/1.1 400 Bad Request
Server: awselb/2.0
Date: Thu, 14 Dec 2023 04:44:34 GMT
Content-Type: text/html
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:135:strstr_alt) [P1:T1:app] debug: strstr_alt(2):
Server: awselb/2.0
Date: Thu, 14 Dec 2023 04:44:34 GMT
Content-Type: text/html
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:143:strstr_alt) [P1:T1:app] debug: strstr_alt(3):
Server: awselb/2.0
Date: Thu, 14 Dec 2023 04:44:34 GMT
Content-Type: text/html
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:143:strstr_alt) [P1:T1:app] debug: strstr_alt(3):
Server: awselb/2.0
Date: Thu, 14 Dec 2023 04:44:34 GMT
Content-Type: text/html
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:140:strstr_alt) [P1:T1:app] debug: strstr_alt(3.0):
Server: awselb/2.0
Date: Thu, 14 Dec 2023 04:44:34 GMT
Content-Type: text/html
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:126:strstr_alt) [P1:T1:app] debug: strstr_alt: Server: awselb/2.0
Date: Thu, 14 Dec 2023 04:44:34 GMT
Content-Type: text/html
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:135:strstr_alt) [P1:T1:app] debug: strstr_alt(2):
Date: Thu, 14 Dec 2023 04:44:34 GMT
Content-Type: text/html
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:143:strstr_alt) [P1:T1:app] debug: strstr_alt(3):
Date: Thu, 14 Dec 2023 04:44:34 GMT
Content-Type: text/html
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:143:strstr_alt) [P1:T1:app] debug: strstr_alt(3):
Date: Thu, 14 Dec 2023 04:44:34 GMT
Content-Type: text/html
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:140:strstr_alt) [P1:T1:app] debug: strstr_alt(3.0):
Date: Thu, 14 Dec 2023 04:44:34 GMT
Content-Type: text/html
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:126:strstr_alt) [P1:T1:app] debug: strstr_alt: Date: Thu, 14 Dec 2023 04:44:34 GMT
Content-Type: text/html
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:135:strstr_alt) [P1:T1:app] debug: strstr_alt(2):
Content-Type: text/html
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:143:strstr_alt) [P1:T1:app] debug: strstr_alt(3):
Content-Type: text/html
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:143:strstr_alt) [P1:T1:app] debug: strstr_alt(3):
Content-Type: text/html
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:140:strstr_alt) [P1:T1:app] debug: strstr_alt(3.0):
Content-Type: text/html
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:126:strstr_alt) [P1:T1:app] debug: strstr_alt: Content-Type: text/html
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:135:strstr_alt) [P1:T1:app] debug: strstr_alt(2):
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:143:strstr_alt) [P1:T1:app] debug: strstr_alt(3):
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:143:strstr_alt) [P1:T1:app] debug: strstr_alt(3):
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:140:strstr_alt) [P1:T1:app] debug: strstr_alt(3.0):
Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:126:strstr_alt) [P1:T1:app] debug: strstr_alt: Content-Length: 122
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:135:strstr_alt) [P1:T1:app] debug: strstr_alt(2):
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:143:strstr_alt) [P1:T1:app] debug: strstr_alt(3):
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:143:strstr_alt) [P1:T1:app] debug: strstr_alt(3):
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:140:strstr_alt) [P1:T1:app] debug: strstr_alt(3.0):
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:126:strstr_alt) [P1:T1:app] debug: strstr_alt: Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:135:strstr_alt) [P1:T1:app] debug: strstr_alt(2):

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:143:strstr_alt) [P1:T1:app] debug: strstr_alt(3):

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:143:strstr_alt) [P1:T1:app] debug: strstr_alt(3):

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:140:strstr_alt) [P1:T1:app] debug: strstr_alt(3.0):

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:126:strstr_alt) [P1:T1:app] debug: strstr_alt:
<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:135:strstr_alt) [P1:T1:app] debug: strstr_alt(2):
<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:143:strstr_alt) [P1:T1:app] debug: strstr_alt(3):
<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:143:strstr_alt) [P1:T1:app] debug: strstr_alt(3):
<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:140:strstr_alt) [P1:T1:app] debug: strstr_alt(3.0):
<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>
,

(https.c:81:send_cb) [P1:T1:app] debug: *****  send_cb: 31
(https.c:91:send_cb) [P1:T1:app] debug: send_cb: 31
(https.c:107:send_cb) [P1:T1:app] debug: send_cb count: 31
(https.c:603:https_close) [P1:T1:app] debug: https_close
(amber.c:461:amber_http_get) [P1:T1:app] debug: HTTP GET return code: 400

(amber.c:462:amber_http_get) [P1:T1:app] debug: HTTP GET return body: <html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
</body>
</html>


(amber.c:261:amber_status_write) [P1:T1:app] debug: prefix length: 8
(amber.c:254:set_amber_status) [P1:T1:app] debug: <<< set_amber_status: [ERROR] HTTP GET nonce failed with return code: 400
 : sz: 52
(amber.c:254:set_amber_status) [P1:T1:app] debug: >>> set_amber_status: [ERROR] HTTP GET nonce failed with return code: 400
 : sz: 52
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- openat(AT_FDCWD, "/dev/amber/token", O_RDONLY, 0000) = 0x3
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- read(3, 0xc9f5adb0, 0x1f9f) ...
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- return from read(...) = 0x0
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- close(3) = 0x0
(amber.c:176:log_global_vars) [P1:T1:app] debug: g_amber_endpoint_ip sz: 12 = 52.20.94.116
(amber.c:177:log_global_vars) [P1:T1:app] debug: g_amber_endpoint_url sz: 50 = https://api.trustauthority.intel.com/appraisal/v1/
(amber.c:178:log_global_vars) [P1:T1:app] debug: g_amber_kbs_ip sz: 0 =
(amber.c:179:log_global_vars) [P1:T1:app] debug: g_amber_kbs_url sz: 0 =
(amber.c:180:log_global_vars) [P1:T1:app] debug: g_amber_endpoint_apikey sz: 40 = aeKQBT22ux7tZVB1uLyQN58Z1M9J0Bwg8LAQgLpl
(amber.c:182:log_global_vars) [P1:T1:app] debug: g_amber_kbs_keyid sz: 0 =
(amber.c:183:log_global_vars) [P1:T1:app] debug: g_amber_renew sz: 0 =
(amber.c:184:log_global_vars) [P1:T1:app] debug: g_amber_userdata sz: 56 = {"type":"RSA", "key":"RHVtbXkga2V5IChkb250IHVzZSBpdCkK"}
(amber.c:185:log_global_vars) [P1:T1:app] debug: g_amber_quote sz: 0
(amber.c:186:log_global_vars) [P1:T1:app] debug: g_amber_token sz: 0 =
(amber.c:187:log_global_vars) [P1:T1:app] debug: g_amber_secret sz: 0 =
(amber.c:188:log_global_vars) [P1:T1:app] debug: g_amber_status sz: 52 = [ERROR] HTTP GET nonce failed with return code: 400

(amber.c:189:log_global_vars) [P1:T1:app] debug: g_amber_cacerts sz: 0 =
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- openat(AT_FDCWD, "/dev/amber/status", O_RDONLY, 0000) = 0x3
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- read(3, 0xc9f5adb0, 0x1f9f) ...
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- return from read(...) = 0x34
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- read(3, 0xc9f5ade4, 0x1f6b) ...
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- return from read(...) = 0x0
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- close(3) = 0x0
(amber.c:176:log_global_vars) [P1:T1:app] debug: g_amber_endpoint_ip sz: 12 = 52.20.94.116
(amber.c:177:log_global_vars) [P1:T1:app] debug: g_amber_endpoint_url sz: 50 = https://api.trustauthority.intel.com/appraisal/v1/
(amber.c:178:log_global_vars) [P1:T1:app] debug: g_amber_kbs_ip sz: 0 =
(amber.c:179:log_global_vars) [P1:T1:app] debug: g_amber_kbs_url sz: 0 =
(amber.c:180:log_global_vars) [P1:T1:app] debug: g_amber_endpoint_apikey sz: 40 = aeKQBT22ux7tZVB1uLyQN58Z1M9J0Bwg8LAQgLpl
(amber.c:182:log_global_vars) [P1:T1:app] debug: g_amber_kbs_keyid sz: 0 =
(amber.c:183:log_global_vars) [P1:T1:app] debug: g_amber_renew sz: 0 =
(amber.c:184:log_global_vars) [P1:T1:app] debug: g_amber_userdata sz: 56 = {"type":"RSA", "key":"RHVtbXkga2V5IChkb250IHVzZSBpdCkK"}
(amber.c:185:log_global_vars) [P1:T1:app] debug: g_amber_quote sz: 0
(amber.c:186:log_global_vars) [P1:T1:app] debug: g_amber_token sz: 0 =
(amber.c:187:log_global_vars) [P1:T1:app] debug: g_amber_secret sz: 0 =
(amber.c:188:log_global_vars) [P1:T1:app] debug: g_amber_status sz: 52 = [ERROR] HTTP GET nonce failed with return code: 400

(amber.c:189:log_global_vars) [P1:T1:app] debug: g_amber_cacerts sz: 0 =
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- openat(AT_FDCWD, "/dev/amber/userdata", O_WRONLY, 0000) = 0x3
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- write(3, 0xc9f1918f, 0x17) ...
(amber.c:250:set_amber_userdata) [P1:T1:app] debug: <<< set_amber_userdata: a dummy public key here : sz: 23
(amber.c:250:set_amber_userdata) [P1:T1:app] debug: >>> set_amber_userdata: a dummy public key here : sz: 23
(amber.c:261:amber_status_write) [P1:T1:app] debug: prefix length: 7
(amber.c:254:set_amber_status) [P1:T1:app] debug: <<< set_amber_status: [INFO] userdata saved
 : sz: 22
(amber.c:254:set_amber_status) [P1:T1:app] debug: >>> set_amber_status: [INFO] userdata saved
 : sz: 22
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- return from write(...) = 0x17
(libos_parser.c:1628:buf_write_all) [P1:T1:app] trace: ---- close(3) = 0x0
(amber.c:176:log_global_vars) [P1:T1:app] debug: g_amber_endpoint_ip sz: 12 = 52.20.94.116
(amber.c:177:log_global_vars) [P1:T1:app] debug: g_amber_endpoint_url sz: 50 = https://api.trustauthority.intel.com/appraisal/v1/
(amber.c:178:log_global_vars) [P1:T1:app] debug: g_amber_kbs_ip sz: 0 =
(amber.c:179:log_global_vars) [P1:T1:app] debug: g_amber_kbs_url sz: 0 =
(amber.c:180:log_global_vars) [P1:T1:app] debug: g_amber_endpoint_apikey sz: 40 = aeKQBT22ux7tZVB1uLyQN58Z1M9J0Bwg8LAQgLpl
(amber.c:182:log_global_vars) [P1:T1:app] debug: g_amber_kbs_keyid sz: 0 =
(amber.c:183:log_global_vars) [P1:T1:app] debug: g_amber_renew sz: 0 =
(amber.c:184:log_global_vars) [P1:T1:app] debug: g_amber_userdata sz: 23 = a dummy public key here
(amber.c:185:log_global_vars) [P1:T1:app] debug: g_amber_quote sz: 0
(amber.c:186:log_global_vars) [P1:T1:app] debug: g_amber_token sz: 0 =
(amber.c:187:log_global_vars) [P1:T1:app] debug: g_amber_secret sz: 0 =
(amber.c:188:log_global_vars) [P1:T1:app] debug: g_amber_status sz: 22 = [INFO] userdata saved

(amber.c:189:log_global_vars) [P1:T1:app] debug: g_amber_cacerts sz: 0 =
(https.c:578:https_init) [P1:T1:app] debug: https_init
(amber.c:453:amber_http_get) [P1:T1:app] debug: HTTP GET (52.20.94.116): https://api.trustauthority.intel.com/appraisal/v1/nonce with apikey: aeKQBT22ux7tZVB1uLyQN58Z1M9J0Bwg8LAQgLpl
(https.c:894:http_get) [P1:T1:app] debug: http_get: https://api.trustauthority.intel.com/appraisal/v1/nonce
(https.c:257:parse_url) [P1:T1:app] debug: parse_url: src_url: https://api.trustauthority.intel.com/appraisal/v1/nonce
(https.c:271:parse_url) [P1:T1:app] debug: parse_url <1, api.trustauthority.intel.com/appraisal/v1/nonce>:2
(https.c:126:strstr_alt) [P1:T1:app] debug: strstr_alt: api.trustauthority.intel.com/appraisal/v1/nonce, /
(https.c:135:strstr_alt) [P1:T1:app] debug: strstr_alt(2): /appraisal/v1/nonce, /
(https.c:143:strstr_alt) [P1:T1:app] debug: strstr_alt(3): /appraisal/v1/nonce, /
(https.c:140:strstr_alt) [P1:T1:app] debug: strstr_alt(3.0): /appraisal/v1/nonce, /
(https.c:276:parse_url) [P1:T1:app] debug: parse_url </appraisal/v1/nonce, api.trustauthority.intel.com/appraisal/v1/nonce>:3
(https.c:278:parse_url) [P1:T1:app] debug: parse_url <api.trustauthority.intel.com, api.trustauthority.intel.com/appraisal/v1/nonce>:4
(https.c:126:strstr_alt) [P1:T1:app] debug: strstr_alt: api.trustauthority.intel.com, :
(https.c:152:strstr_alt) [P1:T1:app] debug: strstr_alt(4): , :
(https.c:288:parse_url) [P1:T1:app] debug: PARSE URL: host:api.trustauthority.intel.com, port:443, path:/appraisal/v1/nonce
(https.c:896:http_get) [P1:T1:app] debug: http_get: 1, api.trustauthority.intel.com 443 /appraisal/v1/nonce
(https.c:672:mbedtls_pal_connect) [P1:T1:app] debug: mbedtls_pal_connect: tcp:52.20.94.116:443
(https.c:81:send_cb) [P1:T1:app] debug: *****  send_cb: 157
(https.c:91:send_cb) [P1:T1:app] debug: send_cb: 157
(https.c:107:send_cb) [P1:T1:app] debug: send_cb count: 157
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 5
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 5
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 95
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 95
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 5
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 5
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 4928
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 3867
(https.c:48:recv_cb) [P1:T1:app] debug: ******* recv_cb: 1061
(https.c:58:recv_cb) [P1:T1:app] debug: recv_cb: 0
(https.c:76:recv_cb) [P1:T1:app] debug: recv_cb read count: 1061
(libos_signal.c:311:internal_fault) [P1:T1:app] error: Internal memory fault at 0x00000000 (slab_alloc at slabmgr.h, libsysdb.so+0x6b698 (addr = 0xff893698), VMID = 1, TID = 1)
(pal_process.c:248:_PalProcessExit) debug: PalProcessExit: Returning exit code 1
Dec 14 '23 05:12 amathew3
There is official Gramine RA-TLS integration with Intel Trust Authority (aka ITA, previously known as Project Amber): https://github.com/gramineproject/contrib/tree/master/Integrations/intel/ra_tls_ita
Closing this PR as not required anymore.
Sep 25 '24 08:09 dimakuv