Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Added trust anchor rfc #9

Merged
merged 2 commits into from Jul 16, 2021
Merged

Added trust anchor rfc #9

merged 2 commits into from Jul 16, 2021

Conversation

vedangj044
Copy link
Contributor

@vedangj044 vedangj044 commented May 25, 2021 •
edited

Added RFC for Trust Anchor feature in DRG.

@jbtrystram
Copy link
Member

There a couple of points that needs some more design before starting to implement things :

  • Spec out the payload for the cert in the app spec section.
  • Same as above but for the device spec section
  • If we allow pushing device private key and cert to the cloud it MUST be encrypted, so there are some metadata going along, the payload needs specification as well

jbtrystram
jbtrystram reviewed May 25, 2021
View reviewed changes
active/005-trust-anchor-management.md Outdated

The specification of each device needs to contain a unique mapping to its physical counterpart, this can be accomplished by storing the MAC Address + Service number of every device or storing the MAC address as a JWT token provided by the server.

The generation of the private keys and certificates would be done using rust-openssl.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This one is a pain to cross compile. Is there a pure rust crate that could do it ? Maybe look into ring and webpki
https://github.com/briansmith/webpki

@jbtrystram jbtrystram merged commit 8397e2d into drogue-iot:main Jul 16, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@lulf lulf lulf left review comments

@jbtrystram jbtrystram jbtrystram left review comments

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
3 participants
@vedangj044 @jbtrystram @lulf