Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Certificates over port 443 #131

Closed
Closed
@martysweet

Description

@martysweet

Hi,

In Feburary, x.509 cert over 443 was announced, allowing better use of AWS IOT behind strict firewalls.

https://aws.amazon.com/about-aws/whats-new/2018/02/aws-iot-core-now-supports-mqtt-connections-with-certificate-based-client-authentication-on-port-443/

image

https://aws.amazon.com/blogs/iot/mqtt-with-tls-client-authentication-on-port-443-why-it-is-useful-and-how-it-works/

From the looks of the release blog, a parameter (ProtocolNameList) has to be set on the outgoing connection, however, I can't see any trace of this in the source code.

Additionally, when using the following code:

myAWSIoTMQTTClient = AWSIoTMQTTClient(clientId)
myAWSIoTMQTTClient.configureEndpoint(host, 443)
myAWSIoTMQTTClient.configureCredentials(rootCAPath, privateKeyPath, certificatePath)

The client sends packets to the broker (observed in WireShark), then times out (presumably because Auth is failing in a weird way).

and using:

myAWSIoTMQTTClient = AWSIoTMQTTClient(clientId, useWebsocket=True)
myAWSIoTMQTTClient.configureEndpoint(host, 443)
myAWSIoTMQTTClient.configureCredentials(rootCAPath, privateKeyPath, certificatePath)

Throws an IAM failure, as expected from the way authentication is implemented.

Does this library currently support this feature? or is it only available on FreeRTOS? and certificates over 443 is not supported, will it eventually be supported for this SDK?

Thanks!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions