<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="https://devzone.nordicsemi.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>AWS IoT OTA Update</title><link>https://devzone.nordicsemi.com/f/nordic-q-a/98911/aws-iot-ota-update</link><description>Hi, 
 
 I try to make our OTA Updates for the device more secure. I follow this guideline and the OTA works fine so far: https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/nrf/libraries/networking/aws_fota.html 
 we use nrf9160 with aws iot cloud</description><dc:language>en-US</dc:language><generator>Telligent Community 13</generator><lastBuildDate>Tue, 01 Aug 2023 05:37:42 GMT</lastBuildDate><atom:link rel="self" type="application/rss+xml" href="https://devzone.nordicsemi.com/f/nordic-q-a/98911/aws-iot-ota-update" /><item><title>RE: AWS IoT OTA Update</title><link>https://devzone.nordicsemi.com/thread/439155?ContentTypeID=1</link><pubDate>Tue, 01 Aug 2023 05:37:42 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:6f6885b5-5799-43e9-bffa-8ac63071d490</guid><dc:creator>&amp;#216;yvind</dc:creator><description>&lt;p&gt;Hello Daniel,&amp;nbsp;&lt;br /&gt;&lt;br /&gt;I&amp;#39;m really sorry for the late reply.&amp;nbsp;&lt;/p&gt;
&lt;div&gt;
&lt;div&gt;
&lt;div&gt;There is still the option of having a custom &lt;a href="https://aws.amazon.com/blogs/compute/introducing-mutual-tls-authentication-for-amazon-api-gateway/"&gt;mutual TLS authenticated firmware server&lt;/a&gt;.&lt;/div&gt;
&lt;div&gt;&lt;br /&gt;Kind regards,&lt;br /&gt;Øyvind.&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: AWS IoT OTA Update</title><link>https://devzone.nordicsemi.com/thread/438866?ContentTypeID=1</link><pubDate>Sun, 30 Jul 2023 13:38:08 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:3927b096-bb08-49ff-99c7-4fb83d934b17</guid><dc:creator>danielboe</dc:creator><description>&lt;p&gt;any updates here?&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: AWS IoT OTA Update</title><link>https://devzone.nordicsemi.com/thread/424826?ContentTypeID=1</link><pubDate>Wed, 10 May 2023 12:08:01 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:33259af7-946c-4bbe-94b2-e01b6ff3f2e3</guid><dc:creator>danielboe</dc:creator><description>&lt;p&gt;Do you have any update here?&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: AWS IoT OTA Update</title><link>https://devzone.nordicsemi.com/thread/422302?ContentTypeID=1</link><pubDate>Tue, 25 Apr 2023 13:02:05 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:a61c0235-e5d4-4c38-893a-6a7d6f1e1101</guid><dc:creator>danielboe</dc:creator><description>&lt;p&gt;So to be clear: The only way for OTA Updates is having a exposed URL with the *.bin file with public access? Just I need to know I dont need to search for other solutions....&lt;br /&gt;&lt;br /&gt;best regards&lt;br /&gt;&lt;br /&gt;daniel&lt;br /&gt;&lt;br /&gt;&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: AWS IoT OTA Update</title><link>https://devzone.nordicsemi.com/thread/422224?ContentTypeID=1</link><pubDate>Tue, 25 Apr 2023 09:06:56 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:41eaf877-5dca-4c67-bf7e-3dca41cf8235</guid><dc:creator>&amp;#216;yvind</dc:creator><description>&lt;p&gt;OK, sorry for the back and forth. The pre-signed URLs are what you are looking for, however, this is not supported yet in the download manager due to the long path. I do not have a timeline yet, but it does look like it will be implemented in the next version of nRF Connect SDK.&amp;nbsp;&lt;/p&gt;
&lt;p&gt;Kind regards,&amp;nbsp;&lt;br /&gt;Øyvind&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: AWS IoT OTA Update</title><link>https://devzone.nordicsemi.com/thread/421966?ContentTypeID=1</link><pubDate>Mon, 24 Apr 2023 08:46:25 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:f49ad2f8-b49d-470b-be65-efebc21a04f6</guid><dc:creator>&amp;#216;yvind</dc:creator><description>&lt;p&gt;Sorry, I might have been too quick with my answer on this. Will need to investigate some more in regards to using presigned URLs with AWS IoT.&lt;br /&gt;&lt;br /&gt;I need to verify if the following statement is still relevant&lt;/p&gt;
&lt;blockquote&gt;
&lt;div&gt;The problem is that the download client depends on the download URL being split in host and path on the cloud side, however AWS IoT jobs and pre-signed URLs do not support this, they generate a full URL. In addition, pre-signed URLs only work with HTTP&lt;strong&gt;s (TLS)&lt;/strong&gt;, this is typically something we want to avoid because of the overhead.&lt;/div&gt;
&lt;div&gt;&lt;/div&gt;
&lt;/blockquote&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: AWS IoT OTA Update</title><link>https://devzone.nordicsemi.com/thread/421765?ContentTypeID=1</link><pubDate>Fri, 21 Apr 2023 12:59:47 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:71bd534c-32b7-4ecb-8095-0a20c7723898</guid><dc:creator>danielboe</dc:creator><description>&lt;p&gt;is this feature working with the aws iot ota updates? Or do I need to implement this by myself? If it is implemented, do you habe a example on the nrf9160 side how to implement this?&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;
&lt;p&gt;thanks and best regards&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;
&lt;p&gt;daniel&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: AWS IoT OTA Update</title><link>https://devzone.nordicsemi.com/thread/421764?ContentTypeID=1</link><pubDate>Fri, 21 Apr 2023 12:56:14 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:a8f68fd8-2b9c-4fa0-a8f6-280fe3baea6a</guid><dc:creator>&amp;#216;yvind</dc:creator><description>&lt;p&gt;The one solution that is often mentioned by our AWS developers is to use e.g.&amp;nbsp;&lt;a href="https://docs.aws.amazon.com/AmazonS3/latest/API/sig-v4-authenticating-requests.html"&gt;AWS Signature Version 4&lt;/a&gt;.&amp;nbsp;&lt;/p&gt;
&lt;p&gt;Note that you need to&amp;nbsp;increase some sizes in order for it to work, due to the length of the file path.&lt;br /&gt;&lt;pre class="ui-code" data-mode="text"&gt;CONFIG_AWS_FOTA_PAYLOAD_SIZE=2048
CONFIG_AWS_FOTA_FILE_PATH_MAX_LEN=2048
CONFIG_DOWNLOAD_CLIENT_MAX_FILENAME_SIZE=2048
CONFIG_DOWNLOAD_CLIENT_MAX_HOSTNAME_SIZE=256&lt;/pre&gt;&lt;/p&gt;
&lt;p&gt;Let me know how that works for you!&lt;/p&gt;
&lt;p&gt;Kind regards,&lt;br /&gt;Øyvind&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: AWS IoT OTA Update</title><link>https://devzone.nordicsemi.com/thread/421512?ContentTypeID=1</link><pubDate>Thu, 20 Apr 2023 13:05:20 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:be07280e-3864-4640-943b-bd979e55c0eb</guid><dc:creator>danielboe</dc:creator><description>&lt;p&gt;Hi, we work on SDK Version 2.0.0 and I attach you our sample OTA json. I think at the moment no need to convert to private here.&lt;br /&gt;&lt;br /&gt;&lt;/p&gt;
&lt;p&gt;&lt;pre class="ui-code" data-mode="text"&gt;{
  &amp;quot;operation&amp;quot;: &amp;quot;app_fw_update&amp;quot;,
  &amp;quot;fwversion&amp;quot;: &amp;quot;1.2.3&amp;quot;,
  &amp;quot;size&amp;quot;: 222222,
  &amp;quot;location&amp;quot;: {
    &amp;quot;protocol&amp;quot;: &amp;quot;http:&amp;quot;,
    &amp;quot;host&amp;quot;: &amp;quot;&amp;lt;bucket&amp;gt;.s3.eu-central-1.amazonaws.com&amp;quot;,
    &amp;quot;path&amp;quot;: &amp;quot;&amp;lt;updatefile&amp;gt;.bin&amp;quot;
  }
}&lt;/pre&gt;&lt;/p&gt;
&lt;pre&gt;&lt;/pre&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: AWS IoT OTA Update</title><link>https://devzone.nordicsemi.com/thread/421510?ContentTypeID=1</link><pubDate>Thu, 20 Apr 2023 13:01:59 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:4444f16c-d325-4f21-b7f3-7bc0ae51e5f1</guid><dc:creator>&amp;#216;yvind</dc:creator><description>&lt;p&gt;Hello Daniel,&amp;nbsp;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;/p&gt;
&lt;p&gt;I will look into your case. Could you please provide what version of the nRF Connect SDK you are running? Can you provide more details on the JSON file? If needed we can convert this ticket to private if there are details you do not want to share.&amp;nbsp;&lt;br /&gt;&lt;br /&gt;Kind regards,&lt;br /&gt;Øyvind&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item></channel></rss>