Missing .inc file in https example?

[Lars Fagerbakke]

Hello!

I'm looking at the http_client example, especially the ca_certificate.h file. In the project the https-cert.der file is included but the header references a https-cert.der.inc file.

So I get the error

fatal error: https-cert.der.inc: No such file or directory
   14 | #include "https-cert.der.inc"

Do I have to do anything with the included .der file?

[Sigurd Hellesvik]

Hei Lars,

Are we talking about the HTTPS sample?

Which version of the SDK do you use?

Which build configuration do you use?

Which file is the error from?

Regards,
Sigurd Hellesvik

[Lars Fagerbakke]

Hei Sigurd Hellesvik 

I was just looking at the code in order to bring it over to my own project. So I did not build it. But I added a build configuration for it and built it. Now everything is fine (building at least).

One question; ca_certificate.h references "https-cert.der.inc" file. Does the build process do something with the https-cert.der that included in the project? After building it is located within the build folder structure.

[Sigurd Hellesvik]

Looks like you understood more, nice!
However, I unfortunately do not have an overview yet. Could you answer my questions form my previous comment?

[Lars Fagerbakke]

Are we talking about the HTTPS sample?

Not exactly, I see the page you reference use 2.5.99 so I'm a bit behind.

I'm working off the http_client sample in nrf-sdk v2.5.0. I can't find a source link on the page that you linked. Further more the page you linked links to another page describing the use of certificates, and it states "it must be in PEM format". But the sample I have has the certificate as a DER file, I was expecting PEM.

Which version of the SDK do you use?

2.5.0

Which build configuration do you use?

thingy_nrf9160_ns

Which file is the error from?

As earlier mentioned, after setting up a build profile it builds just fine. But I still wonder where the .der.inc files comes from, guessing the build. And if the documentation states it must be PEM why is DER working?

[Sigurd Hellesvik]

Lars Fagerbakke said:

I'm working off the http_client sample in nrf-sdk v2.5.0. I can't find a source link on the page that you linked.

As in v2.5.0 docs for HTTPS Client sample?

Lars Fagerbakke said:

But the sample I have has the certificate as a DER file, I was expecting PEM.

The HTTPS Client sample from v2.5.0 has DigiCertGlobalG2.pem.
Which DER are you talking about here exactly?

Oooh, I see now that you are talking about the Zephyr sample Socket HTTP Client, is that right?
In that case, the .inc files are generated in the CMakeLists.txt.

In general I would suggest that you use our HTTPS sample, as the nRF9160 typically stores certs in the modem and does TLS from the modem. The Zephyr example is likely more generic and therefore stores the certs in the application.
Does that makes ense?

[Lars Fagerbakke]

That made much more sense Sigurd Hellesvik I just used the sample browser in VS Code and then I got the other sample. The one the document described is found here: https://github.com/nrfconnect/sdk-nrf/tree/main/samples/net/https_client

And I also now see how .inc file is generated in the CMakeLists.txt - nice!