Generation of self siged certificates for TLS communication

[Anitha S]

For my TCP with TLS communication, I want to generate self-signed certificates and keys how to generate them?

[Håkon Alseth]

Hi,

 

Typically, certificates are generated from the server side, and provisioned to the client (ie. the nRF9160).

Once these are generated from the server side, you can provision them using for instance the at_client.

Here's a guide that explains it with Azure:

https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/nrf/libraries/networking/azure_iot_hub.html#provisioning-of-the-certificates

Similar guide for AWS:

https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/nrf/libraries/networking/aws_iot.html#programming-the-certificates-to-the-on-board-modem-of-the-nrf9160-based-kit

 

Kind regards,

Håkon

[Anitha S]

Thank you for your reply, I want to make my nrf9160 as a server so how to generate certificates for that, Can I use OpenSSL to generate those certificates?

Best regards

Anitha S

[Håkon Alseth]

Hi,

 

Anitha S said:

I want to make my nrf9160 as a server so how to generate certificates for that, Can I use OpenSSL to generate those certificates?

Yes, you can use openssl to generate keys/certificates for your server/client.

Note that in order to setup the nRF9160 as a server, you need to be connected to an APN that has open ports (ie. firewall/NAT exceptions)

 

Kind regards,

Håkon