how to use cURL with TLS implementation

RE: how to use cURL with TLS implementation

Øyvind — Fri, 27 Sep 2024 08:07:43 GMT

Okay, thanks!

RE: how to use cURL with TLS implementation

s-shige — Thu, 26 Sep 2024 20:21:01 GMT

Hello

We have a few customers that using Nordic.

That kind point of view regarding your chip product will be some volume of K, M numbers.

thx

RE: how to use cURL with TLS implementation

Øyvind — Fri, 20 Sep 2024 09:35:19 GMT

If you are able to provide a list of how many that asks about this, we can forward this as a feature request.

Kind regards,
Øyvind

RE: how to use cURL with TLS implementation

s-shige — Fri, 20 Sep 2024 08:16:14 GMT

Hello

Thank you for your update.

I can confirm cURL (without TLS) is available.

but, need "CONFIG_NET_SOCKETS_POSIX_NAMES=n" so, some hand craft to implement socket function with zepher API.

Anyway, TLS(mbedTLS) is not supported for now, I understand.

We have often request about this feature support from customers.

so, I hope it will support shortly.

thx

RE: how to use cURL with TLS implementation

Øyvind — Fri, 20 Sep 2024 06:35:09 GMT

Hello,

Michal is currently out of office and I have been assigned his ticket while he is out.

[quote user="s-shige"]That means this is not support ?[/quote]

Yes, there is currently no support for cURL and HTTPS in our nRF Connect SDK. The cURL library in our SDK was introduced for our Cellular: Modem shell sample.

Kind regards,
Øyvind

RE: how to use cURL with TLS implementation

s-shige — Mon, 16 Sep 2024 19:22:28 GMT

Dear,
Thank you for your kind messages.

That means this is not support ?

I noticed that mbedTLS build system (automatically) is not start with west command. it need to enable "USE_TLS" manually.
And additionally, many hand craft is being required for now. (still not going well..struggling CONFIG conflict)

Could you let me know correct CONFIG to build curl/mbedTLS ?
and is this correct mbedTLS version included ?
I'm using SDK v2.6.1.

thx

RE: how to use cURL with TLS implementation

Michal — Thu, 12 Sep 2024 15:31:21 GMT

I am checking that internally, but I am not sure if there are any concrete numbers I'd be able to find

Since we don't have a ready curl implementation with HTTPS support, you the answer may be that you need to experiment on your own.

We have a Memory Report tool in the nRF Connect for VS Code extension to help out with that as well.

I tried some basic experiments, but those were too basic and didn't really increase the code by more than the bare minimum.

Best regards.

Michal

RE: how to use cURL with TLS implementation

mark.blackburn.orpyx — Wed, 11 Sep 2024 16:06:29 GMT

Do you have an idea how much additional flash and RAM adding mbedTLS would add?

For my project I am making architectural decisions and I want to know what the risk/impact of using mbedTLS would be.

RE: how to use cURL with TLS implementation

Michal — Wed, 11 Sep 2024 13:28:16 GMT

Hello,

Is curl necessary in your situation? Implementing HTTPS with curl will be heavy for flash and RAM. You will have to start with configuring mbedTLS for that.

For HTTPS in general we would recommend using for example our HTTPS Client sample as the base.

Best regards,

Michal

RE: how to use cURL with TLS implementation

s-shige — Sat, 07 Sep 2024 04:04:58 GMT

Hello

Still not going well and I'm looking for solution.

Any idea and advice would be highly appreciated.

thx

RE: how to use cURL with TLS implementation

mark.blackburn.orpyx — Tue, 03 Sep 2024 17:43:15 GMT

Thanks, I've checked it out. It does not allow requests with https

I'll look deeper to see if it can be enabled.

RE: how to use cURL with TLS implementation

Michal — Tue, 03 Sep 2024 16:50:29 GMT

I would recommend maybe looking into the source code for our MoSh sample, since we implement curl there.

Best regards,

Michal

RE: how to use cURL with TLS implementation

s-shige — Sun, 01 Sep 2024 06:12:40 GMT

Updated my code and however, still no work well.

>>curl_version_info(CURLVERSION_NOW);

Return - http

>>curl_easy_perform() failed: Unsupported protocol

how to integrated SSL/TLS ?

here is the snipet code

-----------------------------------------------------------------------

static void https_request_example(void) {
CURL *ch;
CURLcode ret;

char *response = malloc(4096); // Allocate initial memory for the response
if (response == NULL) {
LOG_ERR("Memory allocation failed for response buffer");
return;
}
response[0] = '\0'; // Initialize the response buffer

LOG_INF("Starting HTTPS request example");

/* Dynamically allocate memory for the PEM certificate */
char *mypem = (char *)malloc(strlen(cert_pem) + 1);
if (!mypem) {
printf("malloc failed for PEM certificate\n");
return CURLE_OUT_OF_MEMORY;
}
strcpy(mypem, cert_pem);

curl_global_init(CURL_GLOBAL_ALL);
ch = curl_easy_init();
if (ch) {

curl_easy_setopt(ch, CURLOPT_SSLCERTTYPE, "PEM");
curl_easy_setopt(ch, CURLOPT_SSL_VERIFYPEER, 1L);
curl_easy_setopt(ch, CURLOPT_URL, "">https://www.example.com/");

/* Install the function to modify the SSL context */
curl_easy_setopt(ch, CURLOPT_SSL_CTX_FUNCTION, *sslctx_function);
curl_easy_setopt(ch, CURLOPT_SSL_CTX_DATA, mypem);

// Set the callback function for handling response data
curl_easy_setopt(ch, CURLOPT_WRITEFUNCTION, write_callback);
curl_easy_setopt(ch, CURLOPT_WRITEDATA, (void *)&response);

#if 1
curl_version_info_data *curl_info = curl_version_info(CURLVERSION_NOW);
if (curl_info->protocols) {
const char * const *proto;
for (proto = curl_info->protocols; *proto; ++proto) {
LOG_INF("Supported protocol: %s\n", *proto);
}
}
#endif

// Perform the request
ret = curl_easy_perform(ch);

// Check if the request was successful
if (ret != CURLE_OK) {
LOG_ERR("curl_easy_perform() failed: %s", curl_easy_strerror(ret));
} else {
// Print the response
LOG_INF("Response: %s", response);
}

// Clean up and free the resources
curl_easy_cleanup(ch);
free(response);

} else {
LOG_ERR("Failed to initialize curl");
}

/* Clean up */
curl_easy_cleanup(ch);
curl_global_cleanup();
free(mypem); /* Free dynamically allocated memory */
free(response);

return ret;
}

RE: how to use cURL with TLS implementation

mark.blackburn.orpyx — Tue, 27 Aug 2024 04:14:05 GMT

My guess is that you need to add the root certificate for httpbin.org.

Try using the cert_provision function from nrf/samples/net/download/src/main.c

That function is used for most of the https examples for the nRF9160. It loads the required TLS certificates into the modem.

Could you post your full project.