Provision certificates from the certificates.h is not setting the #define

RE: Provision certificates from the certificates.h is not setting the #define

Didrik Rokhaug — Thu, 20 Feb 2020 14:15:40 GMT

So if I understand you correctly, you have a certificates.h file that looks something like this:

// file: certificates.h

#define CERT_A \
"-----BEGIN CERTIFICATE-----\n"\
"aaaaaaaaaaaaaaaaaaaaaaaaaaa\n"\
"-----End CERTIFICATE-----\n"

#define CERT_B \
"-----BEGIN CERTIFICATE-----\n"\
"bbbbbbbbbbbbbbbbbbbbbbbbbbb\n"\
"-----End CERTIFICATE-----\n"

#define CERT_C \
"-----BEGIN CERTIFICATE-----\n"\
"cccccccccccccccccccccccccccc\n"\
"-----End CERTIFICATE-----\n"

#define CERT_TO_BE_USED CERT_A

And then you write CERT_TO_BE_USED to the modem?

RE: Provision certificates from the certificates.h is not setting the #define

hmichel — Wed, 19 Feb 2020 22:08:39 GMT

I have a conditional compile in certificates.h that allows me to pick from 3 different certificate sets that I created for AWS things. If I build the project with the original certificate set of the 3 then the device connects to AWS IoT. But I need to support different certificate sets for each device that will be deployed

RE: Provision certificates from the certificates.h is not setting the #define

hmichel — Wed, 19 Feb 2020 21:30:29 GMT

This is what I found for searching the source code for CLOUD_CERT_SEC_TAG

And this is what I found in the nrf Connect Project Settings

RE: Provision certificates from the certificates.h is not setting the #define

Didrik Rokhaug — Wed, 19 Feb 2020 12:44:57 GMT

[quote user="hmichel"] I see the delete inbuilt keys have a result code of zero. Is that ok?[/quote]

Yes, that means that it was successfully able to delete the certificates.

[quote user="hmichel"]When I try to use new certificates from AWS in certificates.h I get a -45 error when I try to connect to AWS. So it seems that the default certificates are not getting overwritten at run time. [/quote]

What sec_tag are you providing to the socket?

And is that sec_tag dependent on some configuration options?

RE: Provision certificates from the certificates.h is not setting the #define

hmichel — Wed, 19 Feb 2020 12:02:15 GMT

Also here is the Terminal trace window from startup. I see the delete inbuilt keys have a result code of zero. Is that ok?

RE: Provision certificates from the certificates.h is not setting the #define

hmichel — Wed, 19 Feb 2020 11:58:26 GMT

Just confirmed that Modem firmware version is 1.1.1 by running %SHORTSWVER command

RE: Provision certificates from the certificates.h is not setting the #define

hmichel — Wed, 19 Feb 2020 11:50:30 GMT

Actually this is still an issue and now it is of much higher priority.

It seems as though my board is using the certificates that I had to set using the AT Client software and my certificates that had been converted to JSON format a few months ago. Follow this thread and you will see where Martin had sent me a file containing my certificates converted to JSON format

https://devzone.nordicsemi.com/support/233736

I believe that I have the latest Modem firmware in my board.

When I try to use new certificates from AWS in certificates.h I get a -45 error when I try to connect to AWS. So it seems that the default certificates are not getting overwritten at run time.

RE: Provision certificates from the certificates.h is not setting the #define

Didrik Rokhaug — Thu, 30 Jan 2020 08:11:56 GMT

The issue has been reported internally, and we'll bring this up with Segger.

As you say, the problem is only with Embedded Studio not detecting the configuration. Your application will work as expected.

Best regards,

Didrik

RE: Provision certificates from the certificates.h is not setting the #define

hmichel — Thu, 30 Jan 2020 02:21:47 GMT

certificates.h file is It is still grayed out

I did a rebuild (which should do a clean and build) still no change

However, when I put random text inside the ifdef then I get a compile error.

So it is just a type of display problem and not actually leaving out the certificates.h

RE: Provision certificates from the certificates.h is not setting the #define

Didrik Rokhaug — Wed, 29 Jan 2020 14:07:14 GMT

Hi.

[quote user=""]

I notice that the name of the define in the menu settings is <PROVISION_CERTIFICATES>

and in the code on line 28 it is CONFIG_PROVISION_CERTIFICATES

[/quote]

Yes, this is correct. A Kconfig option will generate the #define CONFIG_<name of option>.

[quote user=""]

I have checked "Provision certificates from the certificates.h file" and clicked the configure button

but in main.c the define at line 28 has not been set so the certificates .h file is not included.

[/quote]

What do you mean by that. Did it not change color?

Did you build the project again after applying the settings?

Or did you empty the build directory?

If you place a #error inside the #ifdef, does it still compile?

Best regards,

Didrik