NRF9160 AWS FOTA over HTTPS

[odwraca]

I have been reviewing this merge: https://github.com/NordicPlayground/fw-nrfconnect-nrf/pull/1982 and it appears that there is capability in the fota example to enable https/tls download for the aws fota example. It appears that DOWNLOAD_CLIENT_TLS needs to be set in the config, but when I set it in the KConfig it failed to build. I am using CLI, not Segger. 

My guess is that I am setting this in the wrong place but my attempt at backtracking this is failing a bit. Was hoping that someone could chime in with where I need to enable the TLS. 

• I am planning on using S3 as the bin source, so the sample cert that was setup should suffice (from what I can tell).
• I have successfully used the AWS FOTA example over http, but https is required for the project. 

Apologies for the noob questions, just trying to sort this out. 

[odwraca]

Well, I hope it was not as easy as I think it was... 

I just set the job document to https and submitted the job via the AWS console. The sample app grabbed the update and installed it, reflecting my updates. 

I am just trying to check logs now to see if it actually downloaded over https.... 

I did this based upon the comment in the merge previously mentioned, excerpt is:

"I can probably add the protocol parsing into this PR for aws_fota library then it's only enabled if the user has specified in the job document that he wants to use https"

[odwraca]

I was able to confirm through server logs that even though the job document is set to https it is downloading over http. So it looks like I still have the issue at hand. 

Just trying to understand how to set it to download over https based upon that latest merge. 

[odwraca]

I have made a very small amount of progress. Realized that the job document was not parsing the https for the aws_fota example, which is why I was able to still successfully update the app via AWS IoT Jobs. That discovery led me to this https://github.com/NordicPlayground/fw-nrfconnect-nrf/pull/1986/files - Which I started working through a bit of last night. 

Just trying to piece it together now based upon some of what sigvart is already trying to accomplish. 

Ultimate goal is to perform an aws_fota sample update via https. 

[odwraca]

After pulling in some changes from https://github.com/NordicPlayground/fw-nrfconnect-nrf/pull/1986/files I was able to build the sample app successfully, but have received the following error. 

Still working through to see what happened, but my guess is that the TLS credentials were not setup correctly. 

I: Start downloading firmware from <Bucket Name>.s3.amazonaws.com/app_update.bin
I: Attempting to connect over IPv4
I: Setting up TLS credentials
E: Unable to connect, errno 95
E: Error (-22) when trying to start firmware download
aws_fota_mqtt_evt_handler: Failed! -22[mqtt_evt_handler:239]
MQTT PUBLISH result=0 len=41mqtt_read_publish_payload: Failed! -5
Disconnecting MQTT client...

[Simon]

I am sorry for the delay, The staffing is reduced during easter due to holidays and I will be gone this week, but I will be back Tuesday next week and will look at your ticket then.

Best regards,

Simon