[lwip-devel] [bug #54601] altcp_tls_create_config_client does not support sending of device certificate and private key

[Richmond Umagat]

Follow-up Comment #2, bug #54601 (project lwip):

Attached are the updated modifications to address your comments.

- A new function called altcp_tls_create_config_client_2wayauth() is
introduced to support two-way authentication (server can authenticate client
using the client certificate and private key; client can authenticate server
using the ca/server certificate)
- 'ca' member in altcp_tls_config structure is necessary. Like 'cert' and
'pkey' members, the memory must persist until connection is freed in
altcp_tls_free_config().

The modifications have been tested working with Amazon AWS IoT cloud.

(file #44924, file #44925)
    _______________________________________________________

Additional Item Attachment:

File name: altcp_tls_mbedtls.c            Size:36 KB
File name: altcp_tls.h                    Size:3 KB


    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?54601>

_______________________________________________
  Message sent via Savannah
  https://savannah.nongnu.org/