deislabs / mystikos

Tools and runtime for launching unmodified container images in Trusted Execution Environments
142 stars 49 forks source link

Raising heap allocation size to accomodate for OpenSSL 3 #1495

Closed justanotherminh closed 1 year ago

justanotherminh commented 1 year ago

OpenEnclave, which is used by Mystikos to perform enclave-related tasks, now uses OpenSSL 3 in the enclave side. OpenSSL 3 requires significantly more heap memory than OpenSSL 1, which is why gencreds was failing due to generate_x509_self_signed_certificate not having enough heap memory.