ESP8266 Developer Zone

Re: Change AT firmware SSL certificates

2016-04-01T09:48:29+08:00

Hi,

Sorry that I do not really understand your question.
SSL connection in AT command does not support cert authentication (CA), it does not have any certificate.

Statistics: Posted by ESP_Faye — Fri Apr 01, 2016 9:48 am

Re: Change AT firmware SSL certificates

2016-03-31T23:17:06+08:00

By the way, I guess my question is the same caccac267 is asking here: viewtopic.php?f=16&t=1726#p5698

Statistics: Posted by pablorodiz — Thu Mar 31, 2016 11:17 pm

Re: Change AT firmware SSL certificates

2016-03-31T23:12:54+08:00

Sorry, maybe too much text in my question so I did not make it clear.

When writing I was already clear that there is no way to change SSL certificates through AT commands.

My question is if there is a way to modify the AT firmware to include new certificates. Maybe just write them in a particular flash address... Maybe there is a way to compile the AT firmware with different certificates even it is a closed source library...

Any way?

Thanks in advance

Statistics: Posted by pablorodiz — Thu Mar 31, 2016 11:12 pm

Re: Change AT firmware SSL certificates

2016-03-30T10:35:02+08:00

Hi,

Sorry that because of the limitation of memory, AT firmware can not set SSL certificates.

Sorry for the inconvenience.

Statistics: Posted by ESP_Faye — Wed Mar 30, 2016 10:35 am

Change AT firmware SSL certificates

2016-03-29T20:06:19+08:00

First of all I want to congratulate everybody here for a great work. This is my first question, but I am using ESP8266 modules and the information here for a long time with great results.

I always use ESP8266 as slave with a more powerful CPU as main processor. The reason for this is because I need SSL for my designs, so until now I had to relay on an external processor to make the SSL part. As I recently noticed, the latest versions of AT firmwares include the possibility to use SSL in the module, freeing the external processor of this task. This would be a great inprovement over my current situation, since I could use a much less expensive external processor (or even none in some cases). The problem is about certificates.

There is no way through AT commands to provide a certificate, and I read in the forum that this not possible due to memory availability problems. That the certificate should be stored in the flash... I was searching information about this process in the documentation and through the forum but I did not find the right place. I found information on how to format the certificates and use them for a custom build firmware, but I would like to stick to the AT firmware, which works great for my use cases.

Could someone please help me understand where should I flash the certificates for the use with AT firmware so it finds them in the right place? Is this possible at all (since AT firmware is not open)?

Statistics: Posted by pablorodiz — Tue Mar 29, 2016 8:06 pm