Questions tagged [mbedtls]

mbed TLS (formerly known as PolarSSL) makes it easier for developers to include cryptographic and SSL/TLS capabilities in their (embedded) products, facilitating this functionality with a minimal coding footprint.

mbed TLS (formerly known as PolarSSL) makes it easier for developers to include cryptographic and SSL/TLS capabilities in their (embedded) products, with a minimal coding footprint.

160 questions
0
votes
1 answer

Mbed TLS Handshake retransmission issue - PC based client and STM32H7 based server

I am working on setting up a USB based secure communication between PC as client and STM32H753 microcontroller running a SSL Server. The network stack used is LwIP and Mbed TLS (TLS v1.2) is used for the secure communication layer. I adapted this…
Sreedhar
  • 33
  • 1
  • 4
0
votes
0 answers

error: ‘mbedtls_ssl_conf_tls13_key_exchange_modes’ was not declared in this scope

When I compile my application with mbedtls using conan I get an error: error: ‘mbedtls_ssl_conf_tls13_key_exchange_modes’ was not declared in this scope my conan.py includes the latest version of mbedtls: requires = [..., "mbedtls/3.2.1", ... …
radato
  • 840
  • 9
  • 27
0
votes
0 answers

Is there a work around for expired root CA certificate on IOT device in the field?

I've got some IOT devices out in the field that use ESP32. They have the old expired "DST Root CA X3" cert issue and now fail to connect over https to download a firmware update file. The devices use the IDF library for https OTA which I think uses…
Felix
  • 1,346
  • 1
  • 12
  • 25
0
votes
0 answers

Can the same mbedtls_ssl_context be used simultaneously for send and receive from different tasks?

In our project we use mbedTLS together with freeRTOS. mbedTLS requires an mbedtls_ssl_context (let's say ssl_context) for the send (mbedtls_ssl_write(...)) and receive (mbedtls_ssl_read(...)) functions. In our project we have a freeRTOS task A to…
Pascal
  • 1
  • 1
0
votes
0 answers

Mbed-TLS wrong value format in x509v3 certificate policies field

I’ve added an “X509v3 Certificate Policies” field to a certificate, with this function mbedtls_x509write_crt_set_extension() and these arguments: OID = “\x55\x1D\x20” (MBEDTLS_OID_CERTIFICATE_POLICIES i.e. OID of policy) value = < policy in DER…
0
votes
0 answers

undefined reference to functions in gzip

When I was trying to build the Hiawatha webserver, I got the following error: [ 1%] Linking C executable cgi-wrapper /usr/bin/ld: CMakeFiles/cgi-wrapper.dir/src/libfs.c.o: in function gzip_file':…
0
votes
0 answers

stm32f7 https connection using with mbedtls

my connnection is return -0x0050 on ssl_tls step. < Read from server:../Middlewares/Third_Party/mbedTLS/library/ssl_tls.c:8270: => read<\n> ../Middlewares/Third_Party/mbedTLS/library/ssl_tls.c:4311: => read…
0
votes
1 answer

Seed generation for each operation

I' musing mbedtls_ctr_drbg_seed function in order to generate seed. Should I do this before each encryption operation or it might be done one when program starts?
vico
  • 17,051
  • 45
  • 159
  • 315
0
votes
1 answer

How can I use mbedtls in CMake?

I'm trying to use mbedtls in my CMakelists.txt file. I used the vcpkg package manager to install mbedtls: vcpkg install mbedtls I added my find_package() statement before add_executable() but despite adding…
BullyWiiPlaza
  • 17,329
  • 10
  • 113
  • 185
0
votes
0 answers

Trying to save to file private and public keys of ECDSA using mbedtls

Working on a embedded bootloader, which is trying to check ECDSA signatures for programs being loaded. In order to accomplish this, I am trying to do the following: First time - generate private and public keys. Sign any application using the…
Steven Burck
  • 67
  • 1
  • 6
0
votes
1 answer

Linking to mbedtls libraries

I have simple application that uses mbedtls. I got errors below while compile it: Starting build... /usr/bin/g++ -fdiagnostics-color=always -g /home/g/projects/aes2/AES_generate.c -o /home/g/projects/aes2/AES_generate -lmbedtls /usr/bin/ld:…
vico
  • 17,051
  • 45
  • 159
  • 315
0
votes
0 answers

Use MbedTLS to read the certificate authority of the client

I'm using MbedTLS v3.1 on an MCU as a server, and I have configured a PKI self-signed with a Root CA, two sub-ca's and a leaf certificate. The server is configured with a certificate chain with the two sub-ca's and the leaf cert. The client for…
jfreek
  • 21
  • 1
0
votes
1 answer

Why does message MAC verification fail with an OpenSSL client but succeed with a python-mbedtls client

Currently I'm trying to develop a simple UDP DTLS server using pre shared keys on Ubuntu 20.04, to receive UDP datagrams from an embedded application. My remote example echo server based on python-mbedtls correctly echoes messages from a…
kiwironnie
  • 1
  • 1
  • 2
0
votes
1 answer

setting up mbedtls for aws sdk embedded C

I am looking at upgrading to the latest aws sdk for embedded-c and can`t implement the openssl version as my device only supports openssl-1.0.2 Looking at using the mbedtls as transport protocol on top of pkcs11, there as some differences which I am…
homer69
  • 53
  • 1
  • 8
0
votes
1 answer

mbedtls DER formatted certificate chain verification

I am trying to verify a certificate chain using mbedTLS version 2.16.2. The certificate chain in DER format as individual files. The PKI is simple as three levels (1) Root_CA (2) Intermediate_CA (3) Device_CERT I could able to verify the…
Gopi
  • 340
  • 4
  • 12