Skip to content

Latest commit

 

History

History
67 lines (39 loc) · 2.14 KB

README.rst

File metadata and controls

67 lines (39 loc) · 2.14 KB
Raw

OTA over MQTT

Introduction

This example demonstrates how you can create an application that updates its firmware Over The Air (OTA) using the MQTT protocol. This application uses :library:`OtaUpgradeMqtt` and follows the recommended versioning principles.

Based on :envvar:`ENABLE_OTA_ADVANCED` the firmware data can be either without any encoding or be signed and encrypted.

Tools

There are two tools that facilitate the packiging and deployment of a new firmware.

For more information read Firmware packaging in the documentation of the :library:`OtaUpgradeMqtt` component.

Security

Depending on :envvar:`ENABLE_SSL` a standard SSL/TLS can be enabled:

  1. The communication between the application and the server will be encrypted using standard SSL.
  2. To prove that the server is the correct one: The MQTT clients should pin the public key fingerprint on the server. OR have a list of public key fingerprints that are allowed.
  3. Depending on :envvar:`ENABLE_CLIENT_CERTIFICATE` the application can send a client certificate that is signed by the server.

Configuration

If :envvar:`ENABLE_SSL` is enabled (highly recommended), OTA upgrade files will be transferred securely over TLS/SSL.

.. envvar:: APP_ID

   Default: "test"

   This variable contains the unique application name.

.. envvar:: APP_VERSION

   Default: not set

   Contains the application major and minor versions separated by comma. Example "4.2".
   If not set will use the current major and minor version from Sming.

.. envvar:: APP_VERSION_PATCH

   Default: not set

   Contains the application patch version as integer. For stable versions you can use 0 until 255.
   For unstable versions the current timestamp can be used as a patch version.

.. envvar:: ENABLE_CLIENT_CERTIFICATE

   Default: 0 (disabled)

   Used in combination with ``ENABLE_SSL``. Set to 1 if the remote server requires the application to authenticate via client certificate.

.. envvar:: MQTT_URL

   Default: depends on  ``ENABLE_SSL`` and ``ENABLE_CLIENT_CERTIFICATE`` values

   Url containing the location of the firmware update MQTT server.