Questions tagged [mbedtls]

mbed TLS (formerly known as PolarSSL) makes it easier for developers to include cryptographic and SSL/TLS capabilities in their (embedded) products, facilitating this functionality with a minimal coding footprint.

mbed TLS (formerly known as PolarSSL) makes it easier for developers to include cryptographic and SSL/TLS capabilities in their (embedded) products, with a minimal coding footprint.

160 questions
1
vote
1 answer

FTPS client procedure for data connection

I am developping a FTPS client in a Embedded system with LWIP and mbedTLS stacks. For now, what I do is : Get an IP adress with DHCP Get IP address of the server with DNS Start a TCP connection to the server ( the control connection) Telling the…
Manu53
  • 91
  • 1
  • 1
  • 6
1
vote
1 answer

Installing mbed TLS with libmbedtls-dev

I am currently working with mbed TLS and I discovered something odd: I want to extract the CRT parameters of a private RSA key with the mbedtls_rsa_export_crt() function [1]. Unfortunately the function is missing. The problem seems to be that I have…
ckmk14
  • 99
  • 1
  • 1
  • 10
1
vote
1 answer

cannot install MbedTLS packages in Julia

I have trouble importing the only "MbedTLS" package from the web to Julia. It is required for using Julia in the Jupyter notebook. I've acquired its zipped file from the git https://github.com/JuliaWeb/MbedTLSBuilder/releases However, I don't know…
Hannah Lee
  • 383
  • 2
  • 7
  • 19
1
vote
1 answer

Using DER key from Java in mbedtls Diffie-Hellman

I have a Java application that is producing keys for a Diffie-Hellman key exchange. These keys are generated, and the public key is exported as follows: /* * Alice creates her own DH key pair with 2048-bit key size */ System.out.println("ALICE:…
Julio
  • 2,261
  • 4
  • 30
  • 56
1
vote
1 answer

Can I limit the length of the TLS messages in Node.js / express.js?

I have a Node.js server serving (rather large) files over HTTPS. When using a "normal" HTTPS client, everything works as expected. But my main use case is serving those files to an embedded system (the larges files are firmware images). The embedded…
Oromis
  • 347
  • 4
  • 13
1
vote
0 answers

Configuring HAproxy to Mbed tls implementation of TLS

How can I configure HAproxy to a specific implementation of TLS, I mean for example " Mbed TLS" which is a security library dedicated to the embedded systems. Thanks in advance
Mariam
  • 11
  • 3
1
vote
1 answer

Do i need a client private key to establish a secure TLS/SSL connection?

I came across a mbedTLS example on an embedded device and i see a server certificate validation (github.com as example) before downloading a firmware but the only certificate/key coded is the one of github (the CA chain, rather than the github cert…
Luigi
  • 376
  • 3
  • 16
1
vote
3 answers

mbedtls_net_connect returned -0x52 when connecting to AWS IoT using ESP32 in Arduino IDE

I am trying to connect to AWS IoT using a basic pubsub example in my ESP32 board with the help of the Arduino IDE. As a basic example it does connect to AWS IoT and publishes messages, but when I give a static IP to the program it does connect to…
1
vote
1 answer

mbedtls why I am getting the "The random generator failed to generate non-zeros" error

I am trying to port AWS SDK which uses mbedtls on Ameba Board. I have a function for AWS : iot_tls_connect to initialize mbedtls. MCU has a TRNG but in the first phase it is not important to use HW TRNG. A software RNG and Entropy can be fine. I…
muratcakmak
  • 325
  • 2
  • 14
1
vote
1 answer

Tls handshake fails even though ciphersuites in common

I am experiencing some trouble while making a secure connection to www.howsmyssl.com/a/check. I am using wolfSSL to connect, however, the handshake always fails (FATAL ERROR alert 40). I tried to sniff the network to look into the packets to see…
Lennart
  • 383
  • 4
  • 16
1
vote
1 answer

DTLS-Server does not answer correct to after second ClientHello

I'm working on building a DTLS-Server and Client setup using a different network transport protocol than UDP. But this protocol is as well non-reliable so DTLS is needed. The protocol uses radio networks to transmit data from client to server and…
wanssemd
  • 21
  • 3
1
vote
1 answer

mbedtls with PSK resulting in error

I'm trying to use PSK with mbedtls library combined with SGX. Without PSK the connection works fine as it should. Here is the relevant client side code: mbedtls_entropy_context entropy; mbedtls_ctr_drbg_context ctr_drbg; mbedtls_ssl_context…
wasp256
  • 5,943
  • 12
  • 72
  • 119
1
vote
1 answer

How to load PEM certificate together with private key in libcurl using mbedtls

Hello I am implementing an application with libcurl. I have a certificate and private key in memory. const char *cert = "-----BEGIN CERTIFICATE----- ...."; const char *key = "-----BEGIN RSA PRIVATE KEY----- ...."; I have found an example how to do…
Mindaugas Jaraminas
  • 3,261
  • 2
  • 24
  • 37
0
votes
1 answer

Shared secret from mbedtls_ecdh_compute_shared() is all 0x00

I am working with mbedtls in a 32-bit microcontroller and have created a ECDH context. I put in the X and Y coordinates of the other party's public key, then attempt to create the shared secret. The shared secret that I am getting is all 0x00. The…
russ
  • 65
  • 7
0
votes
0 answers

esp-idf mqtts without certificate

I'm using esp-idf 4.4 on esp32, and I'm having problems connecting to an mqtts server. In this project we used to connect to an mqtt server, but now there is a requirement to switch to mqtts. my config is as follows: m_mqttConfig.host =…
prophet-five
  • 509
  • 3
  • 14