Security level 4 for a service

[Mikko A]

I would need to configure the security level for some services to security level 4.

But it seems that characteristic_add() in ble_srv_common still does not support setting security level 4 for a service.

See:

https://devzone.nordicsemi.com/f/nordic-q-a/41703/usage-of-ble_gap_conn_sec_mode_set_lesc_enc_with_mitm-and-sd_ble_gatts_attr_get 

My SDK version is nRF5 SDK 17.1.0.

In the link above it is suggested to add following code into set_security_req() in ble_srv_common:

case SEC_MITM_LESC:
    BLE_GAP_CONN_SEC_MODE_SET_LESC_ENC_WITH_MITM(p_perm);
break;

However, the header of this file says: 

/* Attention!
* To maintain compliance with Nordic Semiconductor ASA's Bluetooth profile
* qualification listings, this section of source code must not be modified.
*/

We are using u-blox Anna-B112 Bluetooth module which comes with Bluetooth qualifications. If we modify this source code file, what is the impact on Bluetooth qualification ?

Best regards,

Mikko

[Hieu]

Hi Mikko,

I am not well versed in the qualification topic, so I will need to ask about it and get back to you. It will be sometimes next week because I will be partially out of office for the rest of the week.

Meanwhile, what do you think about implementing the functions the uses set_security_req() on a separate source code file?

Our apologies for this inconvenience.

Hieu

[Mikko A]

Hi,

It is possible to use a separate source code file if that helps with qualifications. But would it actually help ? I mean I don't see the difference between modifying the source code file and implementing the same modifications in a different source code file.

Best regards,

Mikko

[Hieu]

Hi Mikko,

Mikko A said:

But would it actually help ? I mean I don't see the difference between modifying the source code file and implementing the same modifications in a different source code file.

I too understand it that way, but I was not sure how qualification works, so I just recommended that to you in the spirit that "you will not be making any change to the SDK so there should be no concern."

However, I received some advises today. This kind of change is just a minor change/bug fix, and does not add new capabilities, so it is fine, whether done on the ble_srv_common file or in your own custom functions.

Best regards,

Hieu