RE: TCP Socket with TLS

Dhanraj Kawade — Thu, 20 Mar 2025 23:04:45 GMT

Hi Vipin,

Do you have any tutorial or sample to create TCP proxy and connect with remote server using server certificate created by CA root certificate.

It will really helpful.

RE: TCP Socket with TLS

vipin das — Wed, 19 Apr 2023 19:28:06 GMT

Hi Martin,

I was able to run TCP + TLS on my nrf7002 DK.

Let me try to answer your few questions.

1. You can refer some of the existing samples from zephyr/nordic documentation.

2. I used .der certificate with following format.

"-----BEGIN CERTIFICATE-----\n"
"MIIFTjCCBDagAwIBAgISBDR12TV11/ITTmCWq/qhU+6XMA0GCSqGSIb3DQEBCwUA\n"
"MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD\n"
"EwJSMzAeFw0yMjEyMTIxMTUzMzVaFw0yMzAzMTIxMTUzMzRaMB4xHDAaBgNVBAMT\n"
"E21haW5uZXQuaW5jdWJlZC5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK\n"
"AoIBAQCpNJGCqQGQ7igmuZbhmLsvpYtjIE/xxNd43Qwrl4NPfOU3qpg+i/ncWfnt\n"
"SV/v8KwTYTUXdnFhRHFvo9ydtX+K60Y5lzNbDFMLTN5PxyyZaD4d6yzkO91De7Gj\n"
"rMFmIADTSduAC9w7J8gvGscdeErQZ4HYii8lhxPddJW3SW0nGTfhkz/72zL0ty47\n"
"81WznYqRzUugoIYC7M/OPKV2pnvRoc52jYPc0UNy0p2rs8zyqF+gWYa1ePmaqwJ+\n"
"OYLiVxR7eVsvcXJOc2FTXeCwqcUIeUNwxWy/Ra7DVFrEQzgKl6Hm6K3MXeHwoHTl\n"
"N6WhbsUP2SJN/dljbriWNZR4xmrRAgMBAAGjggJwMIICbDAOBgNVHQ8BAf8EBAMC\n"
"BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw\n"
"HQYDVR0OBBYEFEDKJojJPlmrBFmA2M8ygwWdx2vbMB8GA1UdIwQYMBaAFBQusxe3\n"
"WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0\n"
"cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j\n"
"ci5vcmcvMEEGA1UdEQQ6MDiCFGFwcHJvdmVyLmluY3ViZWQubmV0ggtpbmN1YmVk\n"
"Lm5ldIITbWFpbm5ldC5pbmN1YmVkLm5ldDBMBgNVHSAERTBDMAgGBmeBDAECATA3\n"
"BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy\n"
"eXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ALc++yTfnE26dfI5xbpY\n"
"9Gxd/ELPep81xJ4dCYEl7bSZAAABhQZl2FEAAAQDAEcwRQIhAMEEF3wj8FtuqWOJ\n"
"WNr2BaT/AFtIgESs1IvWRY0OKQWfAiAInjoEk8GlGteKSmfOzI+2Y8JW8FfusTMV\n"
"YoFEWrkmVAB1AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABhQZl\n"
"2GsAAAQDAEYwRAIgc0tyIlqyFvJ+78wa8g9CEy4/oQj9nCiQ20QiEdZYHpcCICwb\n"
"zcURI87UMXaGYYYqEUFGhWiz4r2UXC3hkOYwkXQ4MA0GCSqGSIb3DQEBCwUAA4IB\n"
"AQAnnQ/Y8mfVgQ+mmXrdJbCYYWpa4+q2hhPrlHIV+h9DXYiWNXmuoyxnFrqZj7r9\n"
"z9yJTeZP/wKXm3Q2mkJ5tg57dC2tLST+AJPkq8+tcq186qZzXPBVN5kfEuWVcKDm\n"
"K0qgirvspbbo2KqIsp0UKcozdE33HBzAZZQQ0RkERxELLMKTjn5YkTil2TJoGEdy\n"
"omrM8i6tFpK3SHoj1lP9FON+wWVQP5IvghBp5yyoWjoqQLyuh4jOzd9VifVrs7pb\n"
"CvsZB8qlqUacPLfhQjtIAnGyh2tnTbJHiyWP7v9Xf3PdN2M1S+OqzqdOMlS1F/zh\n"
"qJK34+/0TYIoBjsudHmMMVVC\n"

3. In order to make TLS work, ensure the versions of zephyr sdk(my case it is ZEPHYR_SDK_VERSION 0.15.2). nerf-connect-sdk version: nrf-connect-sdk-v2.2.99-dev3.

4. Below mentioned HTTPS CLIENT sample is the best example for TCP+TLS.

5. Always take a little care to configurations.

Let me know if you struggle again with TLS.

Regards

Vipin Das

RE: TCP Socket with TLS

Naeem Maroof — Tue, 14 Mar 2023 13:38:40 GMT

Hi Martin,

Thank you for contacting DevZone at NordicSemi.

You may have a look at NCS HTTPS CLIENT sample for 9160 that shows how to setup TLS session.

For the certificates, please see certificates in modem key management (under modem library)