RE: how do I generate certificate in PEM format for nrf9160 for http-client example

dambsst — Fri, 19 Aug 2022 10:54:30 GMT

Hi Didrik,

Thank you for the clarifications.

Best Regards,

Damien

RE: how do I generate certificate in PEM format for nrf9160 for http-client example

Didrik Rokhaug — Fri, 19 Aug 2022 08:46:55 GMT

Hi Damien,

If you use the certificate manager in the LTE Link Monitor application, you can paste the .pems directly, and they will be correctly formatted when written to the modem through AT commands.

Writing the credentials that way is generally preferable over embedding them in the application code, as that makes them easier to read out.

However, if you do want to include them in the application code, you will have to format them yourself. We do not have any tool for it, but many text editors have features to make it easier. E.g., VS Codes multi-cursor.

Best regards,

Didrik

RE: how do I generate certificate in PEM format for nrf9160 for http-client example

dambsst — Fri, 19 Aug 2022 07:59:01 GMT

Hi,

I suppose what John Luc wants is quite simple:

the .pem format is like that

not like that:

"-----BEGIN CERTIFICATE-----\n"
"MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh\n"
"MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3\n"
"d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD\n"
"QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT\n"
"MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j\n"
"b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG\n"
"9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB\n"
"CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97\n"
"nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt\n"
"43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P\n"
"T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4\n"
"gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO\n"
"BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR\n"
"TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw\n"
"DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr\n"
"hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg\n"
"06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF\n"
"PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls\n"
"YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk\n"
"CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=\n"
"-----END CERTIFICATE-----\n"

So do you have a tool to add all the "\n" and " to use in your SDK?

Or are we suppose to add this manually?

Damien

RE: how do I generate certificate in PEM format for nrf9160 for http-client example

Didrik Rokhaug — Wed, 26 May 2021 12:46:40 GMT

Hi,

What is it that you want?

The certificate in the https_client sample is used to verify that we are connecting to google.com, it doesn't really have anything to do with the nRF9160 (your web-browser/OS would have a similar one, or one further up google.com's certificate chain).

Are you asking how to make your own CA certificate for your own server?

If so, are you hosting the server yourself, or using a cloud service?

Best regards,

Didrik