Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update the server to os.mbed.com #115

Closed
wants to merge 1 commit into from

Conversation

studavekar
Copy link
Contributor

@andresag01
Copy link

Thanks for the PR. I think the changes look good and I already checked that the server certificate still checks out with the PEM CA in the tls-client program.

Currently just waiting for the CI to give us a pass.

@@ -50,7 +50,7 @@

namespace {

const char *HTTPS_SERVER_NAME = "developer.mbed.org";
const char *HTTPS_SERVER_NAME = "os.mbed.org";

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

On second thought, it seems that the domain should actually be os.mbed.com. I tried os.mbed.org and that says the site is unreachable

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oops my bad , updated the PR.

@studavekar
Copy link
Contributor Author

Corrected typo, Output of test run below.

Using Ethernet LWIP
Client IP Address is 10.118.12.134
Connecting with os.mbed.com
Starting the TLS handshake...
TLS connection to os.mbed.com established
Server certificate:
    cert. version     : 3
    serial number     : 65:7B:6D:8D:15:A5:B6:86:87:6B:5E:BC
    issuer name       : C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2
    subject name      : C=GB, ST=Cambridgeshire, L=Cambridge, O=ARM Ltd, CN=*.mbed.com
    issued  on        : 2017-04-03 13:54:02
    expires on        : 2018-05-06 10:31:02
    signed using      : RSA with SHA-256
    RSA key size      : 2048 bits
    basic constraints : CA=false
    subject alt name  : *.mbed.com, mbed.org, *.mbed.org, mbed.com
    key usage         : Digital Signature, Key Encipherment
    ext key usage     : TLS Web Server Authentication, TLS Web Client Authentication
Certificate verification passed

@andresag01
Copy link

@studavekar: Thank you for the fix. I will wait for the CI results.

@RonEld
Copy link
Contributor

RonEld commented Sep 19, 2017

Hi @studavekar
The output you showed is also printed when the hostname is developer.mbed.org:

Using Ethernet LWIP
Client IP Address is 172.16.8.12
Connecting with developer.mbed.org
Starting the TLS handshake...
TLS connection to developer.mbed.org established
Server certificate:
    cert. version     : 3
    serial number     : 65:7B:6D:8D:15:A5:B6:86:87:6B:5E:BC
    issuer name       : C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2
    subject name      : C=GB, ST=Cambridgeshire, L=Cambridge, O=ARM Ltd, CN=*.mbed.com
    issued  on        : 2017-04-03 13:54:02
    issued  on        : 2017-04-03 13:54:02                                                                              
    expires on        : 2018-05-06 10:31:02                                                                              
    signed using      : RSA with SHA-256                                                                                 
    RSA key size      : 2048 bits                                                                                        
    basic constraints : CA=false                                                                                         
    key usage         : Digital Signature, Key Encipherment
    ext key usage     : TLS Web Server Authentication, TLS Web Client Authentication
Certificate verification passed

When changed to os.mbed.com the output should be:

Using Ethernet LWIP
Client IP Address is 172.16.8.12
Connecting with os.mbed.com
Starting the TLS handshake...
TLS connection to os.mbed.com established
Server certificate:
    cert. version     : 3
    serial number     : 65:7B:6D:8D:15:A5:B6:86:87:6B:5E:BC
    issuer name       : C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2
    subject name      : C=GB, ST=Cambridgeshire, L=Cambridge, O=ARM Ltd, CN=*.mbed.com
    issued  on        : 2017-04-03 13:54:02
    expires on        : 2018-05-06 10:31:02
    signed using      : RSA with SHA-256
    RSA key size      : 2048 bits
    basic constraints : CA=false
    subject alt name  : *.mbed.com, mbed.org, *.mbed.org, mbed.com
    subject alt name  : *.mbed.com, mbed.org, *.mbed.org, mbed.com                                                       
    key usage         : Digital Signature, Key Encipherment                                                              
    ext key usage     : TLS Web Server Authentication, TLS Web Client Authentication                                     
Certificate verification passed                                                                                          
                                                                                                                         
HTTPS: Received 200 OK status ... [OK]
HTTPS: Received 'Hello world!' status ... [OK]
HTTPS: Received message:

HTTP/1.1 200 OK
Server: nginx/1.11.12
Date: Mon, 18 Sep 2017 12:54:59 GMT
Content-Type: text/plain
Content-Length: 14
Connection: keep-alive
Last-Modified: Fri, 27 Jul 2012 13:30:34 GMT
Accept-Ranges: bytes
Cache-Control: max-age=36000
Expires: Mon, 18 Sep 2017 22:54:59 GMT
X-Upstream-L3: 172.17.0.4:80
X-Upstream-L2: developer-sjc-cyan-1-nginx
Strict-Transport-Security: max-age=31536000; includeSubdomains

Hello world!

with the HTTPS response
Please confirm

@andresag01
Copy link

@RonEld: According to the CI logs, the correct HTTPS response with the "Hello world!" message are being received correctly.

@andresag01
Copy link

Closing this PR as #117 contains these changes and many other references to developer.mbed.org that needed to be updated to os.mbed.com

@andresag01 andresag01 closed this Sep 19, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants