RA-TLS for Gramine SGX enclaves. Provides rustls ClientConfig / ServerConfig
builders and a verifier that validates Intel DCAP quotes embedded in X.509
certificates during the TLS handshake.
Crate name is opacity-ratls; the library is exposed as ratls (import as
use ratls::...).
sgx— enables the in-enclave key/cert generation path (FFI tora_tls_attest) and DCAP-based quote verification. Requires the Gramine RA-TLS libraries at link time. Withoutsgx, the crate exposes verifier types and config-building helpers but cannot mint an RA-TLS cert.
[dependencies]
opacity-ratls = { git = "https://github.com/OpacityLabs/opacity-ratls", tag = "v0.1.0", features = ["sgx"] }