Mutual TLS (mTLS)

[mglettig]

I would like to do mutal TLS on a NRF9160. I found the https sample where the firmware does server authentication. How do I add client side authentication to this example so that I get mTLS? Did I miss a sample that already shows this?

Best regards,

Michael

[Håkon Alseth]

Hi,

 

Mutual TLS, as described on AWS atleast (https://aws.amazon.com/blogs/compute/introducing-mutual-tls-authentication-for-amazon-api-gateway/), looks to be a verification of the client, similar to what the client does when verifying the domain.

Did I miss a sample that already shows this?

No, there's no sample for this specifically on HTTPS. If you look at the mqtt cloud samples, you will see client and server verification.

You input the ca root and client keypair to the modem via modem_key_mgmt_write():

https://github.com/nrfconnect/sdk-nrf/blob/v1.5.1/subsys/net/lib/nrf_cloud/src/nrf_cloud_transport.c#L419-L449

 

Kind regards,

Håkon