nRF7002dk TLS MQTT

[mahabib]

Hello, I am trying to connect to an MQTT server using PEM certs and mqtt helper, however I get an error: -22 from mqtt_helper: mqtt_connect I have traced the issue to zsock_connect. From my understanding, this is due to the certificate not being in .der format, which is due to a conflict between CONFIG_MBEDTLS_PEM_CERTIFICATE_FORMAT and CONFIG_WPA_SUPP which can not be used together. This seems odd since most routers will require WPA, I am curious if I am missing something here?

The PEM certs work fine on a 9160dk since its cellular.

[Sigurd Hellesvik]

Hi,

See our HTTPS Client sample for how to do TLS with the nRF7002.
Observe also how it is converting its .pem to .inc in CMakeLists.txt.

Regards,
Sigurd Hellesvik

[mahabib]

Unfortunately I  am getting the same error setting my TLS certs this way, as well.

I am using the AWS IoT Connect helper function/library with CONFIG_MQTT_HELPER_PROVISION_CERTIFICATES=n (setting them my self)

[Sigurd Hellesvik]

mahabib said:

I  am getting the same error setting my TLS certs this way, as well.

Let us take this one step at a time, so we can figure out where things goes wrong.

Did the HTTPS Client sample work out of the box?
Which changes did you make to the sample when it stopped working?

[mahabib]

Hey, Sigurd thank you for your response. I have it resolved now, a couple of steps:

1) I converted my certs to DER and added them manually,  CONFIG_MBEDTLS_PEM_CERTIFICATE_FORMAT does not seem to work, at-least with WPA enabled.

2) I rolled back to 2.5.1 from 2.6.1 it almost seems like 2.6.1 requires the _ns built with CONFIG_TLS_CREDENTIALS_BACKEND_PROTECTED_STORAGE=y  for TLS certs to be retrieved properly via SEC tags.