Public CAS
We maintain public CAS instances at domain scone-cas.cf. These instances run in debug mode and should be used only for evaluation purposes. They are also regularly restarted with a clean database. Don't use them in production! As we support semantic versioning, there is a need to operate multiple CAS versions:
Stable
We maintain public CAS instances for the following releases.
| Public CAS Address | CAS version | Public CAS MrEnclave | Namespaces support | Azure integration support | DCAP-based Apps |
|---|---|---|---|---|---|
| scone-cas.cf | 5.7.0 | 3061b9feb7fa67f3815336a085f629a13f04b0a1667c93b14ff35581dc8271e4 |
 |
|
|
| 5-7-0.scone-cas.cf | 5.7.0 | 3061b9feb7fa67f3815336a085f629a13f04b0a1667c93b14ff35581dc8271e4 |
|
|
|
| 5-6-0.scone-cas.cf | 5.6.0 | 0902eec722b3de0d11b56aab3671cc8540e62bd2333427780c8a9cd855e4f298 |
|
|
|
| 4-2-1.scone-cas.cf | 4.2.1 | 4cd0fe54d3d8d787553b7dac7347012682c402220acd062e4d0da3bbe10a1c2c |
 |
|
|
Older versions
Whenever a public CAS instance from a previous version is shut down, we keep its address live and redirect to the oldest available public CAS in the same major version series. For instance, 4-0-0.scone-cas.cf points to 4-2-1.scone-cas.cf, and 5-3-0.scone-cas.cf points to 5-6-0.scone-cas.cf.
Edge
We also maintain edge.scone-cas.cf. This public CAS runs the latest (and potentially unstable) version of SCONE CAS from our nightly builds. We update this public CAS and wipe its database frequently. For this reason, we do not provide its MrEnclave. To attest it, add the option --only_for_testing-trust-any to the scone cas attest command (or --disable-attestation if you're using sconify-image tool). Don't use it in production environments.
| Public CAS Address | CAS version | Public CAS MrEnclave | Namespaces support | Azure integration support | DCAP-based Apps |
|---|---|---|---|---|---|
| edge.scone-cas.cf | 5.7.0+ | N/A | |
|
|
Other info
Ports:
-
8081: client API (session management) -
18765: enclave API (remote attestation)
Supported SCONE Session Language versions:
Feature support
Some SCONE versions might not support some features documented in the SCONE Session Language documentation. Please check the release notes of your SCONE version.
Attest and use a public CAS
To use a public CAS, you need to first attest it with the help of the SCONE CLI:
scone cas attest $PUBLIC_CAS_ADDR $PUBLIC_CAS_MRENCLAVE -GCS --only_for_testing-debug --only_for_testing-ignore-signer
Examples:
$ scone cas attest 5-7-0.scone-cas.cf 3061b9feb7fa67f3815336a085f629a13f04b0a1667c93b14ff35581dc8271e4 -GCS --only_for_testing-debug --only_for_testing-ignore-signer
CAS 5-7-0.scone-cas.cf at https://5-7-0.scone-cas.cf:8081/ is trustworthy
$ scone cas list
* 5-7-0.scone-cas.cf: https://5-7-0.scone-cas.cf:8081/
$ scone session create /path/to/session.yml
cd81e46effaceb61da9180ce7db4766b5238aff8cd81e46effaceb61da9180ce
$ scone cas show-certificate
-----BEGIN CERTIFICATE-----
MIIBTDCB86ADAgECAghoV3B4lRhKTzAKBggqhkjOPQQDAjAOMQwwCgYDVQQDDANj
YXMwHhcNMjIwMTI2MTUwMTQxWhcNMjMwMTI2MTUwMTQxWjAXMRUwEwYDVQQDDAxj
YXMtaW5zdGFuY2UwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQcJFcoKcvVbQtD
WIf1qisRQeUGu6MLPN0wDbv6PuJMQorAy4au2VIBJ6rApfgRA4wTDNZ5cI4InWVm
HVR+RbjpozIwMDAdBgNVHQ4EFgQUuWnrXrbAJpSZie6e7YAMqJGDO0cwDwYDVR0T
AQH/BAUwAwEB/zAKBggqhkjOPQQDAgNIADBFAiEA6NiM8wxDI4gVN0r4jzJJlaBJ
9fAtIJNGnRh1jib4djsCIF+YrJyusM3aY2wSe+XIOow/u2JChFxbZNBjWh9p4wem
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIBQzCB6qADAgECAgg/koKIo4Zy4DAKBggqhkjOPQQDAjAOMQwwCgYDVQQDDANj
YXMwHhcNMjIwMTI2MTUwMTQxWhcNMjMwMTI2MTUwMTQxWjAOMQwwCgYDVQQDDANj
YXMwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAASraUYbL10DLtGeM+YBIuvwuC8U
8FCWBPASNBpr74/oJ3flahuBaSC/MMdcQv1EQT2PSqibkUSsyr5XMiAcgMUbozIw
MDAdBgNVHQ4EFgQUjoYZxSM8doi/cdJOEqELYOdC+UUwDwYDVR0TAQH/BAUwAwEB
/zAKBggqhkjOPQQDAgNIADBFAiEAmve1zzu1IhpJszFlGmFDwyefMTihawrXrzGt
GaVXTIoCICiDXjp9yZ1/OZyYIzGN1RE/45jSWoixdW43iHvg8HYm
-----END CERTIFICATE-----