<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="https://devzone.nordicsemi.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/f/nordic-q-a/113289/trouble-creating-a-create-a-certificate-signing-request-on-nrf5340-for-ble-mesh-certificate-based-provisioning</link><description>So basically, I am have created a key pair using the Identity key generation example and exported the public key using Identity key usage example. Now i need to create a certificate signing request, so I am trying to follow the PSA Crypto example to do</description><dc:language>en-US</dc:language><generator>Telligent Community 13</generator><lastBuildDate>Tue, 10 Sep 2024 05:48:43 GMT</lastBuildDate><atom:link rel="self" type="application/rss+xml" href="https://devzone.nordicsemi.com/f/nordic-q-a/113289/trouble-creating-a-create-a-certificate-signing-request-on-nrf5340-for-ble-mesh-certificate-based-provisioning" /><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/501832?ContentTypeID=1</link><pubDate>Tue, 10 Sep 2024 05:48:43 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:4a63f9cc-b52f-46fa-95e7-5f0e05c6c08c</guid><dc:creator>Sigurd Hellesvik</dc:creator><description>[quote user="Utkarsh-"]The above mentioned error is thrown when I assign life time as PSA_KEY_LIFETIME_PERSISTENT instead of PSA_KEY_LIFETIME_VOLATILE and use psa_set_key_id[/quote]
&lt;p&gt;Yes in the case of persistent lifetime you will need to enable some more settings.&lt;/p&gt;
[quote user="Utkarsh-"]One final question, how can I add TF-M support ?[/quote]
&lt;p&gt;Our TF-M implementation does not support CSR yet, so this sample will not work with TF-M in v2.7.0. &lt;br /&gt;I specifically asked our devs about this when I created the sample.&lt;/p&gt;
&lt;p&gt;I cannot give any timeline as to when our TF-M implementation will support this.&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/501829?ContentTypeID=1</link><pubDate>Tue, 10 Sep 2024 05:21:19 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:b88768b8-5a45-46f6-97e0-5e96f45a06b2</guid><dc:creator>Utkarsh</dc:creator><description>&lt;p&gt;One final question, how can I add TF-M support ?&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/501679?ContentTypeID=1</link><pubDate>Mon, 09 Sep 2024 09:33:31 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:43506d24-a8f4-43f6-aa2f-07c6f1a93578</guid><dc:creator>Utkarsh</dc:creator><description>&lt;p&gt;My apologies it is working now on ncs v2.6.1. The above mentioned error is thrown when I assign life time as PSA_KEY_LIFETIME_PERSISTENT instead of PSA_KEY_LIFETIME_VOLATILE and use psa_set_key_id&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/501654?ContentTypeID=1</link><pubDate>Mon, 09 Sep 2024 07:37:12 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:2fa60a29-d482-4f4c-9e9b-8db055721fac</guid><dc:creator>Sigurd Hellesvik</dc:creator><description>&lt;p&gt;As in your code or my sample?&lt;br /&gt;If my sample, can you list which board target and NCS version you built for?&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/501630?ContentTypeID=1</link><pubDate>Mon, 09 Sep 2024 03:48:51 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:63fea6ad-612e-42d9-ad66-947d5374e351</guid><dc:creator>Utkarsh</dc:creator><description>&lt;p&gt;The code now builds fine but throws a psa_generate_key failed (-134) error after flashing&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/501538?ContentTypeID=1</link><pubDate>Fri, 06 Sep 2024 12:35:24 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:3ebae914-7e1d-45e2-9f16-86c5597e7c51</guid><dc:creator>Sigurd Hellesvik</dc:creator><description>&lt;p&gt;I had a bug in my patch, which by chance caused this very random error. &lt;br /&gt;I fixed it in a commit now&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/501064?ContentTypeID=1</link><pubDate>Wed, 04 Sep 2024 05:23:24 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:097db908-d84e-4582-9cc3-5f2a4d8c520b</guid><dc:creator>Utkarsh</dc:creator><description>&lt;p&gt;Yes it is persisting in v2.7.0 as well&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/500922?ContentTypeID=1</link><pubDate>Tue, 03 Sep 2024 10:00:57 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:a5b1e4eb-06c8-4e14-a221-128022054233</guid><dc:creator>Utkarsh</dc:creator><description>&lt;p&gt;okay will check as soon as possible&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/500907?ContentTypeID=1</link><pubDate>Tue, 03 Sep 2024 09:13:43 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:f4415e71-6af1-4c59-92cc-9324dc500773</guid><dc:creator>Sigurd Hellesvik</dc:creator><description>&lt;p&gt;Try on v2.7.0. Does the new patch work there?&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/500871?ContentTypeID=1</link><pubDate>Tue, 03 Sep 2024 05:53:30 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:ccb65209-d894-4967-b66a-80c47679d577</guid><dc:creator>Utkarsh</dc:creator><description>&lt;p&gt;Also it is breaking my other codes with the error:&lt;/p&gt;
&lt;div&gt;
&lt;div&gt;&lt;span&gt;#error&lt;/span&gt;&lt;span&gt; &lt;/span&gt;&lt;span&gt;&amp;quot;MBEDTLS_PEM_WRITE_C defined, but not all prerequisites&amp;quot;&lt;/span&gt;&lt;/div&gt;
&lt;/div&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/500865?ContentTypeID=1</link><pubDate>Tue, 03 Sep 2024 05:16:21 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:6aa87a66-60c8-4e33-b41c-a7820ee03dc0</guid><dc:creator>Utkarsh</dc:creator><description>&lt;p&gt;Hi, I have tried using the newer patch but it isnt working for me. This is the error that I get&lt;br /&gt;&lt;br /&gt;&lt;pre class="ui-code" data-mode="text"&gt;[2/228] Generating include/generated/version.h
-- Zephyr version: 3.5.99 (C:/ncs/v2.6.1/zephyr), build: v3.5.99-ncs1-1
[8/228] Building C object modules/nrf/subsys/nrf_security/src/CMakeFiles/mbedcrypto_base.dir/C_/ncs/v2.6.1/modules/crypto/mbedtls/library/base64.c.obj
FAILED: modules/nrf/subsys/nrf_security/src/CMakeFiles/mbedcrypto_base.dir/C_/ncs/v2.6.1/modules/crypto/mbedtls/library/base64.c.obj 
C:\ncs\toolchains\cf2149caf2\opt\zephyr-sdk\arm-zephyr-eabi\bin\arm-zephyr-eabi-gcc.exe -DKERNEL -DMBEDTLS_CONFIG_FILE=\&amp;quot;nrf-config.h\&amp;quot; -DMBEDTLS_PSA_CRYPTO_CONFIG_FILE=\&amp;quot;nrf-psa-crypto-want-config.h\&amp;quot; -DMBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE=\&amp;quot;nrf-psa-crypto-config.h\&amp;quot; -DNRF5340_XXAA_APPLICATION -DNRF_SKIP_FICR_NS_COPY_TO_RAM -DPICOLIBC_LONG_LONG_PRINTF_SCANF -D_FORTIFY_SOURCE=1 -D_POSIX_C_SOURCE=200809 -D__LINUX_ERRNO_EXTENSIONS__ -D__PROGRAM_START -D__ZEPHYR__=1 -IC:/ncs/v2.6.1/zephyr/include -IC:/Users/Dell/Nordic_Projects/csr_ecdsa/build_1/zephyr/include/generated -IC:/ncs/v2.6.1/zephyr/soc/arm/nordic_nrf/nrf53 -IC:/ncs/v2.6.1/zephyr/lib/libc/common/include -IC:/ncs/v2.6.1/zephyr/soc/common/nordic_nrf/. -IC:/ncs/v2.6.1/zephyr/soc/arm/nordic_nrf/common/. -IC:/ncs/v2.6.1/nrf/include -IC:/ncs/v2.6.1/nrfxlib/crypto/nrf_cc312_mbedcrypto/include -IC:/ncs/v2.6.1/nrfxlib/crypto/nrf_cc312_mbedcrypto/include/mbedtls -IC:/ncs/v2.6.1/nrf/tests/include -IC:/ncs/v2.6.1/modules/hal/cmsis/CMSIS/Core/Include -IC:/ncs/v2.6.1/zephyr/modules/cmsis/. -IC:/ncs/v2.6.1/modules/hal/nordic/nrfx -IC:/ncs/v2.6.1/modules/hal/nordic/nrfx/drivers/include -IC:/ncs/v2.6.1/modules/hal/nordic/nrfx/mdk -IC:/ncs/v2.6.1/zephyr/modules/hal_nordic/nrfx/. -IC:/ncs/v2.6.1/nrfxlib/crypto/nrf_cc312_platform/include -IC:/Users/Dell/Nordic_Projects/csr_ecdsa/build_1/modules/nrf/subsys/nrf_security/src/include/generated -IC:/ncs/v2.6.1/nrf/subsys/nrf_security/include -IC:/ncs/v2.6.1/nrf/ext/oberon/psa/core/include -IC:/ncs/v2.6.1/nrf/ext/oberon/psa/core/library -IC:/ncs/v2.6.1/modules/crypto/mbedtls/include -IC:/ncs/v2.6.1/modules/crypto/mbedtls/library -IC:/ncs/v2.6.1/nrf/subsys/nrf_security/src/drivers/nrf_cc3xx/include -fno-strict-aliasing -Os -imacros C:/Users/Dell/Nordic_Projects/csr_ecdsa/build_1/zephyr/include/generated/autoconf.h -fno-printf-return-value -fno-common -g -gdwarf-4 -fdiagnostics-color=always -mcpu=cortex-m33 -mthumb -mabi=aapcs -mfp16-format=ieee -mtp=soft --sysroot=C:/ncs/toolchains/cf2149caf2/opt/zephyr-sdk/arm-zephyr-eabi/arm-zephyr-eabi -imacros C:/ncs/v2.6.1/zephyr/include/zephyr/toolchain/zephyr_stdint.h -Wall -Wformat -Wformat-security -Wno-format-zero-length -Wno-pointer-sign -Wpointer-arith -Wexpansion-to-defined -Wno-unused-but-set-variable -Werror=implicit-int -fno-pic -fno-pie -fno-asynchronous-unwind-tables -ftls-model=local-exec -fno-reorder-functions --param=min-pagesize=0 -fno-defer-pop -fmacro-prefix-map=C:/Users/Dell/Nordic_Projects/csr_ecdsa=CMAKE_SOURCE_DIR -fmacro-prefix-map=C:/ncs/v2.6.1/zephyr=ZEPHYR_BASE -fmacro-prefix-map=C:/ncs/v2.6.1=WEST_TOPDIR -ffunction-sections -fdata-sections --specs=picolibc.specs -std=c99 -MD -MT modules/nrf/subsys/nrf_security/src/CMakeFiles/mbedcrypto_base.dir/C_/ncs/v2.6.1/modules/crypto/mbedtls/library/base64.c.obj -MF modules\nrf\subsys\nrf_security\src\CMakeFiles\mbedcrypto_base.dir\C_\ncs\v2.6.1\modules\crypto\mbedtls\library\base64.c.obj.d -o modules/nrf/subsys/nrf_security/src/CMakeFiles/mbedcrypto_base.dir/C_/ncs/v2.6.1/modules/crypto/mbedtls/library/base64.c.obj -c C:/ncs/v2.6.1/modules/crypto/mbedtls/library/base64.c
C:/ncs/v2.6.1/modules/crypto/mbedtls/library/base64.c: In function &amp;#39;mbedtls_base64_encode&amp;#39;:
C:/ncs/v2.6.1/modules/crypto/mbedtls/library/base64.c:77:16: error: &amp;#39;MBEDTLS_ERR_BASE64_BUFFER_TOO_SMALL&amp;#39; undeclared (first use in this function); did you mean &amp;#39;MBEDTLS_ERR_MPI_BUFFER_TOO_SMALL&amp;#39;?
   77 |         return MBEDTLS_ERR_BASE64_BUFFER_TOO_SMALL;
      |                ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      |                MBEDTLS_ERR_MPI_BUFFER_TOO_SMALL
C:/ncs/v2.6.1/modules/crypto/mbedtls/library/base64.c:77:16: note: each undeclared identifier is reported only once for each function it appears in
C:/ncs/v2.6.1/modules/crypto/mbedtls/library/base64.c: In function &amp;#39;mbedtls_base64_decode&amp;#39;:
C:/ncs/v2.6.1/modules/crypto/mbedtls/library/base64.c:164:20: error: &amp;#39;MBEDTLS_ERR_BASE64_INVALID_CHARACTER&amp;#39; undeclared (first use in this function); did you mean &amp;#39;MBEDTLS_ERR_MPI_INVALID_CHARACTER&amp;#39;?
  164 |             return MBEDTLS_ERR_BASE64_INVALID_CHARACTER;
      |                    ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      |                    MBEDTLS_ERR_MPI_INVALID_CHARACTER
C:/ncs/v2.6.1/modules/crypto/mbedtls/library/base64.c:200:16: error: &amp;#39;MBEDTLS_ERR_BASE64_BUFFER_TOO_SMALL&amp;#39; undeclared (first use in this function); did you mean &amp;#39;MBEDTLS_ERR_MPI_BUFFER_TOO_SMALL&amp;#39;?
  200 |         return MBEDTLS_ERR_BASE64_BUFFER_TOO_SMALL;
      |                ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      |                MBEDTLS_ERR_MPI_BUFFER_TOO_SMALL
[21/228] Building C object modules/nrf/subsys/nrf_security/src/CMakeFiles/mbedcrypto_base.dir/C_/ncs/v2.6.1/modules/crypto/mbedtls/library/bignum.c.obj
ninja: build stopped: subcommand failed.
FATAL ERROR: command exited with status 1: &amp;#39;C:\ncs\toolchains\cf2149caf2\opt\bin\cmake.EXE&amp;#39; --build &amp;#39;c:\Users\Dell\Nordic_Projects\csr_ecdsa\build_1&amp;#39;

 *  The terminal process terminated with exit code: 1. 
 *  Terminal will be reused by tasks, press any key to close it.&lt;/pre&gt;&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/499190?ContentTypeID=1</link><pubDate>Wed, 21 Aug 2024 10:42:05 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:e133332a-1179-44b6-9c32-4892307c5530</guid><dc:creator>Sigurd Hellesvik</dc:creator><description>[quote user="Utkarsh-"]Thank you very much for adding TF-M support![/quote]
&lt;p&gt;The sample itself does not support TF-M. But the patch from before was breaking TF-M globally so I fixed that.&lt;/p&gt;
[quote user="Utkarsh-"]Is there a reason why patch was required and not included in the NCS release?[/quote]
&lt;p&gt;We are currently working on converting our crypto libraries, and not everything has been moved yet. This will be added to NCS at some point, but in the meantime I created a patch as a workaround. The patch is not &amp;quot;clean&amp;quot;, so the final solution at some later point will probably be different.&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/499189?ContentTypeID=1</link><pubDate>Wed, 21 Aug 2024 10:09:11 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:fad575c0-81de-4b80-bb2f-8326198a540a</guid><dc:creator>Utkarsh</dc:creator><description>&lt;p&gt;Thank you very much for adding TF-M support!&lt;/p&gt;
&lt;p&gt;Is there a reason why patch was required and not included in the NCS release?&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/499169?ContentTypeID=1</link><pubDate>Wed, 21 Aug 2024 08:17:29 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:33a00696-7567-4aa1-9167-7ef316c308b8</guid><dc:creator>Sigurd Hellesvik</dc:creator><description>&lt;p&gt;Happy to hear that!&lt;br /&gt;Btw, I just added a new commit to the project, so you might want to check that one out.&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/499135?ContentTypeID=1</link><pubDate>Wed, 21 Aug 2024 04:54:42 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:1390a0d8-ff1e-48c8-b3cd-5aba15729af7</guid><dc:creator>Utkarsh</dc:creator><description>&lt;p&gt;It is working now.&lt;/p&gt;
&lt;p&gt;Thank you for all the help over the past few weeks!&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/499025?ContentTypeID=1</link><pubDate>Tue, 20 Aug 2024 11:37:12 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:02a74a5b-22a3-49ca-ba8f-5288ca1228e7</guid><dc:creator>Sigurd Hellesvik</dc:creator><description>&lt;p&gt;yes&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/499005?ContentTypeID=1</link><pubDate>Tue, 20 Aug 2024 10:44:34 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:a000d6d7-ad89-438d-9c43-86c650c9b974</guid><dc:creator>Utkarsh</dc:creator><description>&lt;p&gt;Should I remove the previously applied patch on mbedtls?&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/498986?ContentTypeID=1</link><pubDate>Tue, 20 Aug 2024 08:50:22 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:967bced5-d949-4eda-8d83-cdead0480bc3</guid><dc:creator>Utkarsh</dc:creator><description>&lt;p&gt;I am still getting the above mentioned errors&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/498972?ContentTypeID=1</link><pubDate>Tue, 20 Aug 2024 07:43:10 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:668e8ffb-5092-46b6-b837-5f654e8e2d16</guid><dc:creator>Sigurd Hellesvik</dc:creator><description>&lt;p&gt;I just changed it to ECDSA. See the git sample again now.&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/498947?ContentTypeID=1</link><pubDate>Tue, 20 Aug 2024 05:15:33 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:3cf612f7-f72f-4e73-aa37-c5b04ee7f4ab</guid><dc:creator>Utkarsh</dc:creator><description>&lt;p&gt;Thank you very much!&amp;nbsp;&lt;br /&gt;Can the same be done using ECDSA? I have changed the code to accommodate the same but I get the following error:&amp;nbsp;&lt;/p&gt;
&lt;p&gt;&lt;pre class="ui-code" data-mode="text"&gt;FAILED: modules/nrf/subsys/nrf_security/src/CMakeFiles/mbedcrypto.dir/C_/ncs/v2.6.1/modules/crypto/mbedtls/library/pk_wrap.c.obj 
C:\ncs\toolchains\cf2149caf2\opt\zephyr-sdk\arm-zephyr-eabi\bin\arm-zephyr-eabi-gcc.exe -DKERNEL -DMBEDTLS_CONFIG_FILE=\&amp;quot;nrf-config.h\&amp;quot; -DMBEDTLS_PSA_CRYPTO_CONFIG_FILE=\&amp;quot;nrf-psa-crypto-want-config.h\&amp;quot; -DMBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE=\&amp;quot;nrf-psa-crypto-config.h\&amp;quot; -DNRF5340_XXAA_APPLICATION -DNRF_SKIP_FICR_NS_COPY_TO_RAM -DPICOLIBC_LONG_LONG_PRINTF_SCANF -D_FORTIFY_SOURCE=1 -D_POSIX_C_SOURCE=200809 -D__LINUX_ERRNO_EXTENSIONS__ -D__PROGRAM_START -D__ZEPHYR__=1 -IC:/ncs/v2.6.1/zephyr/include -IC:/Users/Dell/Nordic_Projects/psa_csr_ecc/build_1/zephyr/include/generated -IC:/ncs/v2.6.1/zephyr/soc/arm/nordic_nrf/nrf53 -IC:/ncs/v2.6.1/zephyr/lib/libc/common/include -IC:/ncs/v2.6.1/zephyr/soc/common/nordic_nrf/. -IC:/ncs/v2.6.1/zephyr/soc/arm/nordic_nrf/common/. -IC:/ncs/v2.6.1/nrf/include -IC:/ncs/v2.6.1/nrf/tests/include -IC:/ncs/v2.6.1/modules/hal/cmsis/CMSIS/Core/Include -IC:/ncs/v2.6.1/zephyr/modules/cmsis/. -IC:/ncs/v2.6.1/modules/hal/nordic/nrfx -IC:/ncs/v2.6.1/modules/hal/nordic/nrfx/drivers/include -IC:/ncs/v2.6.1/modules/hal/nordic/nrfx/mdk -IC:/ncs/v2.6.1/zephyr/modules/hal_nordic/nrfx/. -IC:/Users/Dell/Nordic_Projects/psa_csr_ecc/build_1/modules/nrf/subsys/nrf_security/src/include/generated -IC:/ncs/v2.6.1/nrf/subsys/nrf_security/include -IC:/ncs/v2.6.1/nrf/ext/oberon/psa/core/include -IC:/ncs/v2.6.1/nrf/ext/oberon/psa/core/library -IC:/ncs/v2.6.1/modules/crypto/mbedtls/include -IC:/ncs/v2.6.1/modules/crypto/mbedtls/library -IC:/ncs/v2.6.1/nrf/ext/oberon/psa/drivers -isystem C:/ncs/v2.6.1/nrfxlib/crypto/nrf_cc312_platform/include -isystem C:/ncs/v2.6.1/nrfxlib/crypto/nrf_oberon/include -isystem C:/ncs/v2.6.1/nrfxlib/crypto/nrf_oberon/include/mbedtls -fno-strict-aliasing -Os -imacros C:/Users/Dell/Nordic_Projects/psa_csr_ecc/build_1/zephyr/include/generated/autoconf.h -fno-printf-return-value -fno-common -g -gdwarf-4 -fdiagnostics-color=always -mcpu=cortex-m33 -mthumb -mabi=aapcs -mfp16-format=ieee -mtp=soft --sysroot=C:/ncs/toolchains/cf2149caf2/opt/zephyr-sdk/arm-zephyr-eabi/arm-zephyr-eabi -imacros C:/ncs/v2.6.1/zephyr/include/zephyr/toolchain/zephyr_stdint.h -Wall -Wformat -Wformat-security -Wno-format-zero-length -Wno-pointer-sign -Wpointer-arith -Wexpansion-to-defined -Wno-unused-but-set-variable -Werror=implicit-int -fno-pic -fno-pie -fno-asynchronous-unwind-tables -ftls-model=local-exec -fno-reorder-functions --param=min-pagesize=0 -fno-defer-pop -fmacro-prefix-map=C:/Users/Dell/Nordic_Projects/psa_csr_ecc=CMAKE_SOURCE_DIR -fmacro-prefix-map=C:/ncs/v2.6.1/zephyr=ZEPHYR_BASE -fmacro-prefix-map=C:/ncs/v2.6.1=WEST_TOPDIR -ffunction-sections -fdata-sections --specs=picolibc.specs -std=c99 -Wno-unused-function -Wno-unused-variable -Wno-stringop-overflow -Wno-stringop-overread -Wno-strict-aliasing -Wno-uninitialized -Wno-maybe-uninitialized -MD -MT modules/nrf/subsys/nrf_security/src/CMakeFiles/mbedcrypto.dir/C_/ncs/v2.6.1/modules/crypto/mbedtls/library/pk_wrap.c.obj -MF modules\nrf\subsys\nrf_security\src\CMakeFiles\mbedcrypto.dir\C_\ncs\v2.6.1\modules\crypto\mbedtls\library\pk_wrap.c.obj.d -o modules/nrf/subsys/nrf_security/src/CMakeFiles/mbedcrypto.dir/C_/ncs/v2.6.1/modules/crypto/mbedtls/library/pk_wrap.c.obj -c C:/ncs/v2.6.1/modules/crypto/mbedtls/library/pk_wrap.c
In file included from C:/ncs/v2.6.1/modules/crypto/mbedtls/library/pk_internal.h:25,
                 from C:/ncs/v2.6.1/modules/crypto/mbedtls/library/pk_wrap.c:14:
C:/ncs/v2.6.1/modules/crypto/mbedtls/library/pk_wrap.c: In function &amp;#39;rsa_opaque_sign_wrap&amp;#39;:
C:/ncs/v2.6.1/modules/crypto/mbedtls/library/pk_internal.h:28:67: error: &amp;#39;psa_to_pk_rsa_errors&amp;#39; undeclared (first use in this function); did you mean &amp;#39;psa_to_pk_ecdsa_errors&amp;#39;?
   28 |                                                                   psa_to_pk_rsa_errors,            \
      |                                                                   ^~~~~~~~~~~~~~~~~~~~
C:/ncs/v2.6.1/nrf/ext/oberon/psa/core/library/psa_util_internal.h:103:35: note: in definition of macro &amp;#39;PSA_TO_MBEDTLS_ERR_LIST&amp;#39;
  103 |     psa_status_to_mbedtls(status, error_list,                         \
      |                                   ^~~~~~~~~~
C:/ncs/v2.6.1/modules/crypto/mbedtls/library/pk_wrap.c:1784:20: note: in expansion of macro &amp;#39;PSA_PK_RSA_TO_MBEDTLS_ERR&amp;#39;
 1784 |             return PSA_PK_RSA_TO_MBEDTLS_ERR(status);
      |                    ^~~~~~~~~~~~~~~~~~~~~~~~~
C:/ncs/v2.6.1/modules/crypto/mbedtls/library/pk_internal.h:28:67: note: each undeclared identifier is reported only once for each function it appears in
   28 |                                                                   psa_to_pk_rsa_errors,            \
      |                                                                   ^~~~~~~~~~~~~~~~~~~~
C:/ncs/v2.6.1/nrf/ext/oberon/psa/core/library/psa_util_internal.h:103:35: note: in definition of macro &amp;#39;PSA_TO_MBEDTLS_ERR_LIST&amp;#39;
  103 |     psa_status_to_mbedtls(status, error_list,                         \
      |                                   ^~~~~~~~~~
C:/ncs/v2.6.1/modules/crypto/mbedtls/library/pk_wrap.c:1784:20: note: in expansion of macro &amp;#39;PSA_PK_RSA_TO_MBEDTLS_ERR&amp;#39;
 1784 |             return PSA_PK_RSA_TO_MBEDTLS_ERR(status);
      |                    ^~~~~~~~~~~~~~~~~~~~~~~~~
[64/257] Building C object modules/nrf/subsys/nrf_security/src/CMakeFiles/mbedcrypto.dir/C_/ncs/v2.6.1/modules/crypto/mbedtls/library/ccm.c.obj
ninja: build stopped: subcommand failed.
FATAL ERROR: command exited with status 1: &amp;#39;C:\ncs\toolchains\cf2149caf2\opt\bin\cmake.EXE&amp;#39; --build &amp;#39;c:\Users\Dell\Nordic_Projects\psa_csr_ecc\build_1&amp;#39;&lt;/pre&gt;&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/498941?ContentTypeID=1</link><pubDate>Tue, 20 Aug 2024 04:00:39 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:b044731d-a8d0-4884-9eaa-2a74ec944e44</guid><dc:creator>Utkarsh</dc:creator><description>[deleted]&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/498808?ContentTypeID=1</link><pubDate>Mon, 19 Aug 2024 11:26:41 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:e18ae1fb-1c29-4e5e-af3a-79b62dc07ae1</guid><dc:creator>Sigurd Hellesvik</dc:creator><description>&lt;p&gt;This one looks like it works for the nRF5340DK, without TF-M.&lt;br /&gt;&lt;a href="https://github.com/hellesvik-nordic/samples_for_nrf_connect_sdk/tree/main/crypto/psa_csr"&gt;https://github.com/hellesvik-nordic/samples_for_nrf_connect_sdk/tree/main/crypto/psa_csr&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;I did not check the output, so that would be for you.&lt;/p&gt;
&lt;p&gt;Can you give the sample a roll and let me know how it goes?&lt;/p&gt;
&lt;p&gt;EDIT: I was told that ECC would be a better idea than RSA here so I will change it relatively soon&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/498502?ContentTypeID=1</link><pubDate>Thu, 15 Aug 2024 18:25:08 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:0748e19a-ac06-4323-83bd-80315d2802d6</guid><dc:creator>Utkarsh</dc:creator><description>&lt;p&gt;That would be great !&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/498278?ContentTypeID=1</link><pubDate>Wed, 14 Aug 2024 12:37:28 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:5d08370a-6608-45b3-8436-936e61c05038</guid><dc:creator>Sigurd Hellesvik</dc:creator><description>&lt;p&gt;How about this?&lt;/p&gt;
&lt;p&gt;I will try to make a CSR sample myself.&lt;br /&gt;Then you can use that as a reference to check your project.&lt;br /&gt;It will take some time, but I got direct access to our crypto devs so I should be able to get all potential issues I have with this figured out pretty fast.&lt;br /&gt;Im guessing I will be done with such a sample next week.&lt;/p&gt;
&lt;p&gt;How does that sound to you?&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Trouble creating a create a certificate signing request on nrf5340 for BLE Mesh Certificate based provisioning.</title><link>https://devzone.nordicsemi.com/thread/498149?ContentTypeID=1</link><pubDate>Wed, 14 Aug 2024 02:54:42 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:02590e1e-8aa2-4f25-bdac-2008220cc06b</guid><dc:creator>Utkarsh</dc:creator><description>&lt;p&gt;Yes I followed this guide to write my code for generating CSR but it resulted in the following error: Implicit declaration of function :&amp;nbsp;&lt;span style="font-family:inherit;"&gt;&lt;em&gt;mbedtls_pk_setup_opaque&lt;/em&gt;. I further looked into it and found out that even after enabling CONFIG_MBEDTLS_USE_PSA_CRYPTO&amp;nbsp;it was not defined in the &lt;em&gt;nrf-config.h&lt;/em&gt; header file, so I defined it there. This led to the code building successfully but after flashing the code onto the board, the psa_generate_key() started failing with the error -134 which stands for&amp;nbsp;&lt;span&gt;PSA_ERROR_NOT_SUPPORTED. &lt;/span&gt;&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;I further looked into why was this happening, and I found out that this happens whenever&amp;nbsp;&lt;em&gt;CONFIG_MBEDTLS_LEGACY_CRYPTO_C&lt;/em&gt; is enabled. But without enabling this my code doesn&amp;#39;t build.&amp;nbsp;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-family:inherit;"&gt;My problem is very similar to &lt;a href="https://devzone.nordicsemi.com/f/nordic-q-a/106325/mbedtls---using-keys-handled-by-psa-crypto"&gt;this&lt;/a&gt;&amp;nbsp;and I know that there is a solution as that question was solved.&amp;nbsp;Please help me in this regard&lt;br /&gt;&lt;/span&gt;&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item></channel></rss>