• State Verified Answer
  • Replies 6 replies
  • Subscribers 74 subscribers
  • Views 1511 views
  • Users 0 members are here
Attachments (0)
Nordic Case Info
  • Case ID: 300202
Options

How to set AWS IoT certificates in runtime

choehyunho

Hi team,

I am building AWS IoT client based on NRF52833 + Ethernet Controller.

I have done connecting and subscribing/publishing to AWS IoT broker successfully, and now I am trying to find a way for provisioning each device properly.

In AWS IoT library, AWS IoT certificates are statically built into application binary, and seems there is no consideration for runtime changing or reading from NV, etc.

How can I change device certificates for AWS IoT client in runtime?

Is there any proper mechanism for this?

And, Is there any plan for supporting AWS IoT Fleet Provisioning (Online Provisioning) in future nRFConnect SDK?

Parents
  • 0
    And, Is there any plan for supporting AWS IoT Fleet Provisioning (Online Provisioning) in future nRFConnect SDK?

    WE do not talk about roadmaps and timelines here in devzone. Please ask your RSM about this. I have requested an RSM from your place to reach you out soon regarding this.

    How can I change device certificates for AWS IoT client in runtime?

    It does not look like we support this. For now it looks like static certificates only. I will let you know if the developers have anymore insight than this.

  • 0 in reply to Susheel Nuguru

    For the certificate change, I made some quick dirty workaround on aws-certs.h

    //static const unsigned char ca_certificate[] = {
unsigned char ca_certificate[2048] = {
...
//static const unsigned char private_key[] = {
unsigned char private_key[2048] = {
...
//static const unsigned char device_certificate[] = {
unsigned char device_certificate[2048] = {
...

    With this workaround, I can access these variables in my application code.

    extern unsigned char ca_certificate[2048];
extern unsigned char private_key[2048];
extern unsigned char device_certificate[2048];

    Is there any better way? Or can you suggest how I can access these variable without modifying NCS codes?

  • 0 in reply to choehyunho
    choehyunho said:
    Is there any better way? Or can you suggest how I can access these variable without modifying NCS codes?

    Not that I know of, but I can ask my colleague just to be sure.

Reply Children
Related
Terms of service