Skip to content

Releases: intel/intel-sgx-ssl

Linux 2.19 SGX SDK, OpenSSL 1.1.1t

09 Feb 02:18
7d78500
Compare
Choose a tag to compare
Upgrade 1.1.1t (#150)

* upgrade to 1.1.1t


Signed-off-by: Jing He <jing.j.he@intel.com>

Windows 2.17 SGX SDK, OpenSSL 1.1.1q

23 Nov 02:27
60be31f
Compare
Choose a tag to compare
win_2.17_1.1.1q

SGX SDK 2.17 for Windows, OpenSSL 1.1.1q

Linux 2.18 SGX SDK, OpenSSL 1.1.1q

23 Nov 02:26
60be31f
Compare
Choose a tag to compare
lin_2.18_1.1.1q

SGX SDK 2.18 for Linux, OpenSSL 1.1.1q

Windows 2.16.1 SGX SDK, OpenSSL 1.1.1o

11 Aug 05:18
c3a3a30
Compare
Choose a tag to compare
win_2.16.1_1.1.1o

Verified with Windows 2.16.1 SGX SDK

Linux 2.17.1 SGX SDK, OpenSSL 1.1.1o

11 Aug 05:17
c3a3a30
Compare
Choose a tag to compare
lin_2.17.1_1.1.1o

Verified with Linux 2.17.1 SGX SDK

Windows 2.16 SGX SDK, OpenSSL 1.1.1o

16 Jun 04:17
c3a3a30
Compare
Choose a tag to compare
win_2.16_1.1.1o

upgrade OpenSSl 1.1.1o

Linux 2.17 SGX SDK, OpenSSL 1.1.1o

16 Jun 04:17
c3a3a30
Compare
Choose a tag to compare
lin_2.17_1.1.1o

upgrade OpenSSl 1.1.1o

Windows 2.15 SGX SDK, OpenSSL 1.1.1m

08 Apr 09:19
3c35551
Compare
Choose a tag to compare
Linux: small fixes (#111)

* Linux: fix Nix detection

Detect the `OS_ID` of Nix by probing for the presence of the `NIX_STORE`
environment variable instead of `NIX_PATH`. The latter is only set in a
`nix-shell` session but isn't when building a derivation through
`nix-build`. In contrast, the `NIX_STORE` environment variable is set in
both cases.

Signed-off-by: Vincent Haupert <mail@vincent-haupert.de>

* Linux: call binaries relative to PATH

Using an absolute path to call binaries is incompatible with
distributions which do not follow the Filesystem Hierachy Standard;
Nix is an example. Also, it is inconsistent with the rest of the code
base, let alone superfluous.

Signed-off-by: Vincent Haupert <mail@vincent-haupert.de>

* Linux: properly extract GCC major version

Calling `gcc -dumpversion` yields the full version string, e.g.,
`10.3.0`. The `build_openssl.sh` bash script uses the `-ge` number
comparison operator to check if the returned version is at least
8. This results in an error if the returned GCC version includes a patch
version; "10.3.0" isn't a valid number.

This commit fixes the version detection by only extracting the relevant
major version of GCC.

Signed-off-by: Vincent Haupert <mail@vincent-haupert.de>

Linux 2.16 SGX SDK, OpenSSL 1.1.1m

08 Apr 09:18
3c35551
Compare
Choose a tag to compare
Linux: small fixes (#111)

* Linux: fix Nix detection

Detect the `OS_ID` of Nix by probing for the presence of the `NIX_STORE`
environment variable instead of `NIX_PATH`. The latter is only set in a
`nix-shell` session but isn't when building a derivation through
`nix-build`. In contrast, the `NIX_STORE` environment variable is set in
both cases.

Signed-off-by: Vincent Haupert <mail@vincent-haupert.de>

* Linux: call binaries relative to PATH

Using an absolute path to call binaries is incompatible with
distributions which do not follow the Filesystem Hierachy Standard;
Nix is an example. Also, it is inconsistent with the rest of the code
base, let alone superfluous.

Signed-off-by: Vincent Haupert <mail@vincent-haupert.de>

* Linux: properly extract GCC major version

Calling `gcc -dumpversion` yields the full version string, e.g.,
`10.3.0`. The `build_openssl.sh` bash script uses the `-ge` number
comparison operator to check if the returned version is at least
8. This results in an error if the returned GCC version includes a patch
version; "10.3.0" isn't a valid number.

This commit fixes the version detection by only extracting the relevant
major version of GCC.

Signed-off-by: Vincent Haupert <mail@vincent-haupert.de>

Windows 2.14.1 SGX SDK, OpenSSL 1.1.1l

17 Nov 01:05
c2c75fe
Compare
Choose a tag to compare
win_2.14.1_1.1.1l

Add SECURITY.md