about nrf9160 slm mqtt tls1.2

RE: about nrf9160 slm mqtt tls1.2

dejans — Thu, 25 Apr 2024 09:26:34 GMT

Hi,

There are no MQTT AT commands that you could use for this purpose, and you do not need to do that. Modem is handling these parameters automatically in its communication with the server.

Best regards,
Dejan

RE: about nrf9160 slm mqtt tls1.2

bugplus — Wed, 24 Apr 2024 10:47:06 GMT

hi，dejans
1: The test of connected cloud service with certificate is ok;
2: Now test tls1.2 two-way authentication, there are three parameters I do not know how to pass to the server
a: tls version
b: tls protocol
c: ciphersuite
I don't know what AT command to send to the server.

Best regards

RE: about nrf9160 slm mqtt tls1.2

dejans — Wed, 24 Apr 2024 07:39:30 GMT

Hi,

You can look in the documentation at modem key management library and how to manage modem credentials. Please note that you need to create new Security tag with some other value than what is shown because default one is used for connection to the nRF Cloud. TLS credentials will be written to the new sec tag that you have chosen. For writing, reading, deleting and checking the existence of keys and certificates, you can use %CMNG AT command.

Best regards,
Dejan

RE: about nrf9160 slm mqtt tls1.2

bugplus — Tue, 23 Apr 2024 15:32:09 GMT

hi，everyone：

I'm testing the nrf9160 dk，I want to connect to the cloud server through mqtt tls1.2.

1、SLM version

2、hardware nrf9160 dk
already write certificate.

3、I want connect to the cloud server through Mutual TLS authentication

sep1:

AT#XMQTTCON=1,"0","","","xxxxxxxxxxxxxxxx.com",8883
ok
sep2: which AT command can set ssl/tls version?
setp3: which AT command can set ssl/tls protocol?

sep4: which AT command can set ciphersuite?

best regards！

RE: about nrf9160 slm mqtt tls1.2

dejans — Tue, 23 Apr 2024 15:19:55 GMT

Hi,

#XMQTTCON is SLM specific AT command used to operate MQTT client. Is there any specific reason why you mentioned this particular AT command?

SLM sample supports testing of both TLS client and TLS Server roles.

[quote user=""]How can I setting cipher suite version?[/quote]

Setting cipher suite type is usually done via Kconfig options. For example, you can look at nrf_security Kconfig options.

Best regards,
Dejan