Article ID: 000058370 Content Type: Product Information & Documentation Last Reviewed: 03/03/2022

Is It Possible for an Enclave to Communicate Directly with External Applications?

BUILT IN - ARTICLE INTRO SECOND COMPONENT
Summary

How to access web services or external resources from Intel® Software Guard Extensions (Intel® SGX) applications.

Description

Unable to determine how to make Representational State Transfer (REST) or Hypertext Transfer Protocol (HTTP) calls from inside an SGX enclave.

Attempting to communicate directly with an enclave from an external resource.

Resolution

An enclave can communicate only with the untrusted application that it is linked with. This communication happens only inside the platform using Intel® SGX technology, ecalls and ocalls.

Create ocalls from the enclave to the untrusted application that statically links the enclave. Within the ocall, the untrusted application accesses the external resource on behalf of the enclave.

Additional information

Refer to the Intel® SGXDeveloper Reference for your OS for more information on implementing ocalls and ecalls.

Related Products

This article applies to 2 products