Azure IoT Hub Linux Certificates

[Nick163485132]

Hello,

I'm using the Azure Iot Hub example on a Thingy91 and am having issues with certs generated from a Linux environment. Everything works just fine with and without DPS when the certs are generated from Windows using the linked tutorial (https://docs.microsoft.com/en-us/azure/iot-hub/tutorial-x509-scripts) on the project page.

However, we need to use DPS and the bash script in the long term, but I cannot get the device to connect with that method:

1. Generate root/intermediate certs with ./certGen.sh create_root_and_intermediate

2. Upload root cert to Azure IoT Hub and DPS

3. Verify in both places

4. Link IoT Hub instance to DPS

5. Generate device cert with ./certGen.sh create_device_certificate test_device

6. Provision Baltimore CyberTrust root certificate, device certificate, and device private key to the device

7. Configure application to use DPS with the correct IO Scope, as well as the correct device name and security tag

8. Update device firmware

This results in a couple of error messages, "DPS registration request not successful", and "Code was 401, while 202 was expected".

I got the same result using the default RSA algorithm in the bash script, as well as with ECC by modifying the script to use the same algorithm as the powershell script. Can you please provide some insight on why this might not be working or what that error code means?

Thanks,

Nick

[Hakon]

Hello,

I don't have any hardware available to test this at the moment, but hopefully I will be able to test this tomorrow.

[Hakon]

The issue doesn't seem to be reproducible. I believe it could be something to do with the certificates. Can you describe in detail how the certificates were provisioned to the device?

[Nick163485132]

Thanks for checking Hakon. The certs were provisioned to the device via the LTE link monitor using the same process that works for Windows-generated certs. 

I also tried using Microsoft's tool for testing certs for Azure, but this test also failed ( https://docs.microsoft.com/en-us/azure/iot-hub/tutorial-x509-test-certificate ). Unfortunately this tool isn't helpful for debugging the problem, but it certainly seems to be a problem with how the certs are generated. 

The only thing I changed in the bash script is the INTERMEDIATE_CA_PRFIX and INTERMEDIATE_CA_PASSWORD. Though in looking that up I've realized that there are two different versions of this bash script in circulation... 

The version I'm working with is from here: https://github.com/Azure/iotedge/tree/master/tools/CACertificates

But there is also another version here: https://github.com/Azure/azure-iot-sdk-c/tree/master/tools/CACertificates

I'll try the other version and report back.

[Nick163485132]

Hakon, it appears the other version of the script did the trick. To be clear, this one worked on the first attempt: github.com/.../CACertificates