Search found 79 matches

by Jon
Thu Apr 08, 2021 4:55 pm
Forum: NetBurner Software
Topic: sign the auto gen cert
Replies: 4
Views: 2413

Re: sign the auto gen cert

Hi Rebootexpert, The easiest way to do this is to add in a compiled version of your CA in the der format. You can generate a .cpp of this file with our NNDK using the following command: compfile CA.der ca_cert ca_cert_len CaCrt.cpp Add this to your application. Then at the top of <nndk_isntall>\libr...
by Jon
Fri Mar 26, 2021 5:23 pm
Forum: NetBurner Software
Topic: validate cert and private key
Replies: 15
Views: 6337

Re: validate cert and private key

Great, I'll give that a shot too and see what I get. Thank you for the additional information.
by Jon
Fri Mar 26, 2021 10:47 am
Forum: NetBurner Software
Topic: validate cert and private key
Replies: 15
Views: 6337

Re: validate cert and private key

Hi RebootExpert, You're right on the null termination. Sorry about that. I had fixed the system files for that function, but those won't be out until the next release. That's really interesting on that certificate. Is that one that you generated yourself, or one that you purchased from somewhere? I'...
by Jon
Thu Mar 25, 2021 4:51 pm
Forum: NetBurner Software
Topic: validate cert and private key
Replies: 15
Views: 6337

Re: validate cert and private key

Hi RebootExpert, Here's the function that addresses the two different time formats. I'm working on the certificate validation now. Would you mind testing this against your use case and let me know if it works as expected for you? // Make sure we have system time if(!SetTimeNTPFromPool(false)) { retu...
by Jon
Wed Mar 24, 2021 3:56 pm
Forum: NetBurner Software
Topic: validate cert and private key
Replies: 15
Views: 6337

Re: validate cert and private key

Hey RebootExpert, We definitely need to update SSL_IsCertExpired() to handle both date formats, and the intent was for that function to be able to be used with any certificate. We also had an issue with our snprintf() functions, which is why I ended up having to manually terminate the string. I'll w...
by Jon
Wed Mar 24, 2021 1:02 pm
Forum: NetBurner Software
Topic: validate cert and private key
Replies: 15
Views: 6337

Re: validate cert and private key

Hi Reboot Expert, The 'Z' character indicates Zulu time, and is part of the standard time format. Looking more into this, though, the format for the expiration date will be dependent on how long the certificate is valid for. For certificates that are valid through 2049, the format should be UTCTime ...
by Jon
Mon Mar 22, 2021 1:55 pm
Forum: NetBurner Software
Topic: validate cert and private key
Replies: 15
Views: 6337

Re: validate cert and private key

Hi RebootExpert, The function IsSSL_CertNKeyValid() only checks to make sure that the certificate and key in memory isn't corrupted and that they can actually be used in the system. It doesn't validate them against each other. Our documentation should be updated to reflect that, and I appreciate you...
by Jon
Wed Mar 17, 2021 10:04 am
Forum: NetBurner Software
Topic: how to close secure websocket properly
Replies: 12
Views: 4880

Re: how to close secure websocket properly

Hi RebootExpert, Thank you very much for taking the time to run that and report what you found. I'll test this in 2.9.5 and see if I can't figure out why it's having issues. It sounds like we might have some additional changes to make. In the meantime, I'm glad to hear that you've found a solution f...
by Jon
Tue Mar 16, 2021 11:46 am
Forum: NetBurner Software
Topic: how to close secure websocket properly
Replies: 12
Views: 4880

Re: how to close secure websocket properly

Hi RebootExpert, It sounds like you had a working solution above, but wanted the SSL FD to close first. In this case, you can call: int sslFd = 0; WebSocket* ws = GetWebSocketRecord( webSocketFd ); if( ws != nullptr ) { sslFd = ws->m_fd_tcp; } In this case, the TCP is actually the SSL fd, as it's as...
by Jon
Wed Mar 03, 2021 11:16 am
Forum: NetBurner Software
Topic: CreateCerts Directory missing
Replies: 15
Views: 5659

Re: CreateCerts Directory missing

Hi SeeCwriter,

Thank you very much for that update, and I'm glad to hear that you got everything working. The module files should definitely be compiled when rebuilding all system files. I'll bring that up to our tools folks and see if we can figure out what's going on there.