How to use AWS IoT Just In TIme Provisioning(JITP) on nRF9160?

RE: How to use AWS IoT Just In TIme Provisioning(JITP) on nRF9160?

Yusuke — Sat, 30 Nov 2019 12:37:43 GMT

OK,

JITP works out with v1.1.0 of modem fw and v1.1.0 of nrf tag

RE: How to use AWS IoT Just In TIme Provisioning(JITP) on nRF9160?

Hakon — Fri, 22 Nov 2019 10:21:27 GMT

Please flash at_client and then try provisioning the certificates from lte link monitor.

RE: How to use AWS IoT Just In TIme Provisioning(JITP) on nRF9160?

Yusuke — Tue, 19 Nov 2019 13:52:16 GMT

yes, when I configure certificates in a regular way, mqtt_simple+TLS works fine.

RE: How to use AWS IoT Just In TIme Provisioning(JITP) on nRF9160?

Hakon — Tue, 19 Nov 2019 13:13:02 GMT

Can you run some other example, like mqtt_simple?

RE: How to use AWS IoT Just In TIme Provisioning(JITP) on nRF9160?

Yusuke — Tue, 12 Nov 2019 15:38:55 GMT

I confirmed that certificates were deleted.

I think nRF9160 does not support JITP of AWS IoT at the moment.

Considering the production of nRF9160 device, JITP of AWS is one of the options of uploading certificates. It's good for nRF9160 to support JITP of AWS IoT.

RE: How to use AWS IoT Just In TIme Provisioning(JITP) on nRF9160?

Hakon — Tue, 12 Nov 2019 15:09:46 GMT

Can you run AT%CMNG=1 and show me the results?

RE: How to use AWS IoT Just In TIme Provisioning(JITP) on nRF9160?

Yusuke — Mon, 11 Nov 2019 14:09:08 GMT

the error occurs only with this code. I use the same AWS IoT server. When the device is connected to it with usual certificates, it doesn't cause any error. Can you test JITP to reproduce this error on your side?

RE: How to use AWS IoT Just In TIme Provisioning(JITP) on nRF9160?

Hakon — Mon, 11 Nov 2019 12:45:36 GMT

Do you get "ERROR: getaddrinfo failed 12" under any other circumstances, or is it specific to this code? It could be a DNS issue.

RE: How to use AWS IoT Just In TIme Provisioning(JITP) on nRF9160?

Yusuke — Sun, 10 Nov 2019 13:19:28 GMT

I deleted certificates and got this error. Any advice?

***** Booting Zephyr OS v1.14.99-ncs2 *****
The MQTT simple sample started
Deleting certs sec_tag: 16842753
nrf_inbuilt_key_delete(16842753, 0) => result=5
Deleting certs sec_tag: 16842753
nrf_inbuilt_key_delete(16842753, 1) => result=5
Deleting certs sec_tag: 16842753
nrf_inbuilt_key_delete(16842753, 2) => result=5
Deleting certs sec_tag: 16842753
nrf_inbuilt_key_delete(16842753, 3) => result=5
Deleting certs sec_tag: 16842753
nrf_inbuilt_key_delete(16842753, 4) => result=5
Write ca certs sec_tag: 16842753
CA_CERTIFICATE err: 5
LTE Link Connecting ...
LTE Link Connected!
ERROR: getaddrinfo failed 12

certificates for JITP has a unique format.

You need to combine a client certificate and CA certificate to a new client certificate like bellow.

I guess nRF9160 does not support this format and an error occurs.

#define CLIENT_PUBLIC_CERTIFICATE \
"-----BEGIN CERTIFICATE-----\n" \
.
.
"aaaaaaaaaaaaaaaabbbbbbbbbbbbbbbbbbbbbbbvvvvvvvvvvvvvvvvvvvvvvvvv\n" \
"aaaaaaaaaaaaaaaabbbbbbbbbbbbbbbbbbbbbbbvvvvvvvvvvvvvvvvvvvvvvvvv\n" \
.
.
"biR8iAb8xoEkb0TyE/UcGFI2\n" \
"-----END CERTIFICATE-----\n" \
"-----BEGIN CERTIFICATE-----\n" \
.
.
"aaaaaaaaaaaaaaaabbbbbbbbbbbbbbbbbbbbbbbvvvvvvvvvvvvvvvvvvvvvvvvv\n" \
"aaaaaaaaaaaaaaaabbbbbbbbbbbbbbbbbbbbbbbvvvvvvvvvvvvvvvvvvvvvvvvv\n" \
.
.
"JqvXo+GfWAvo1Zqj7ZGjpc+uNN4B6Kvib5s12PrtWTWfTZEuIHrBNCYs2DxN\n" \
"-----END CERTIFICATE-----\n"

RE: How to use AWS IoT Just In TIme Provisioning(JITP) on nRF9160?

Hakon — Tue, 05 Nov 2019 15:05:22 GMT

Hello,

can you try to manually delete the certificates by using AT%CMNG? And then rewrite the certificates.