Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

nx_tcpserver_tls_setup() : do not enable elliptic curve #56

Closed
EdouardMALOT opened this issue Oct 27, 2021 · 9 comments
Closed

nx_tcpserver_tls_setup() : do not enable elliptic curve #56

EdouardMALOT opened this issue Oct 27, 2021 · 9 comments
Assignees

Comments

@EdouardMALOT
Copy link

nx_tcpserver_tls_setup() works well for RSA key but not with EC

I found nx_secure_tls_ecc_initialize() call is missing.

My workaround is :
Pasted Graphic

@tstapko
Copy link

tstapko commented Oct 27, 2021

Thanks for reaching out! Your solution is correct - this is really a documentation/sample application issue since we don't make it clear that ECC algorithms for ciphersuites and X.509 certificates requires this extra initialization step. We are aware of the problem and hopefully will be able to improve the docs and sample applications in the next release.

@tstapko
Copy link

tstapko commented Oct 28, 2021

Quick update - I didn't immediately realize you were updating Azure RTOS code with your fix. This is definitely an issue and we will be adding some new APIs to better support ECC in the nx_tcpserver library. I've created an internal work item to track the feature and we hope to have those APIs available in an upcoming release.

@EdouardMALOT
Copy link
Author

Thank you, I really appreciate your responsiveness

@EdouardMALOT EdouardMALOT changed the title nx_tcpserver_tls_setup() : to not enable elliptic curve nx_tcpserver_tls_setup() : do not enable elliptic curve Feb 7, 2022
@EdouardMALOT
Copy link
Author

I re-open this issue because it seems not fix in netXduo 6.1.10

@EdouardMALOT EdouardMALOT reopened this Feb 7, 2022
@wenhui-xie
Copy link
Contributor

@DoudFPV I have added an API to support ECC configuration. Could you leave your email address so that I can email you the patch files and sample code? And It would be helpful if you can give us your feedback about the new API.

@EdouardMALOT
Copy link
Author

EdouardMALOT commented Feb 14, 2022

(I will delete msg after you get it)

@wenhui-xie
Copy link
Contributor

@DoudFPV Got it.

@EdouardMALOT
Copy link
Author

I didn't got your mail yet (don't forget "." between first name and family name)

@wenhui-xie
Copy link
Contributor

@DoudFPV I have sent the email. Please check. Thanks.

@TiejunMS TiejunMS assigned wenhui-xie and unassigned tstapko Feb 21, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants