Re: [lwip-users] mbedtls

2023-04-14 Thread Giuseppe Modugno
Il 14/04/2023 20:19, Simon Goldschmidt ha scritto: On 13.04.2023 13:23, Giuseppe Modugno wrote: What is the latest mbedtls version that is compatible with lwip, specifically the layer altcp_tls_mbedtls.c? Sorry, the current source did not track the version which it is compatible with. But

Re: [lwip-users] mbedtls

2023-04-14 Thread Simon Goldschmidt
On 13.04.2023 13:23, Giuseppe Modugno wrote: What is the latest mbedtls version that is compatible with lwip, specifically the layer altcp_tls_mbedtls.c? Sorry, the current source did not track the version which it is compatible with. But I'd gladly accept patches covering that or improving

Re: [lwip-users] mbedtls integration

2023-04-14 Thread Simon Goldschmidt
On 14.04.2023 10:08, Giuseppe Modugno wrote: In the past I enabled ALTCP layer to add TLS and I used altcp_tls_mbedtls examples present in lwip repo. I thought it was the way to add TLS to lwip. Let's say it is "our" way to do that. Recently I looked at some example projects of NXP, such

[lwip-users] mbedtls integration

2023-04-14 Thread Giuseppe Modugno
In the past I enabled ALTCP layer to add TLS and I used altcp_tls_mbedtls examples present in lwip repo. I thought it was the way to add TLS to lwip. Recently I looked at some example projects of NXP, such as this[1]. This is an example of a TLS httpd server. TLS is added by mbedtls, but ALTCP

[lwip-users] mbedtls

2023-04-13 Thread Giuseppe Modugno
What is the latest mbedtls version that is compatible with lwip, specifically the layer altcp_tls_mbedtls.c? For sure, current development source code of lwip is not compatible with latest mbedtls version. Indeed, you can see in altcp_tls_mbedtls.c the following includes: |#include

[lwip-users] mbedtls port: Changing SSL config parameters

2022-04-14 Thread Gary Metalle
Hi I'm using LWIP 2.2.0 on an ARM imx.rt platform along with mbedtls version 2.27.0. Specifically I'm using the altcp_tls 'app' wrapper that makes it easy to switch between TCP and TLS for my connection to an MQTT broker using mbedtls for the encryption. I have just had need to configure a

[lwip-users] Mbedtls with netconn examples

2020-09-13 Thread Colin Stanley
From: Colin Stanley Sent: Sunday, September 13, 2020 10:07 AM To: 'lwip-users@nongnu.org' Subject: Mbedtls with netconn examples Is it possible to use the netconn api with altcp / mdebtls. Most of the examples use raw API, but I have FRREERTOS and need other TCP thread to work

[lwip-users] Mbedtls with netconn examples

2020-09-13 Thread Colin Stanley
Is it possible to use the netconn api with altcp. Most of the examples use raw API, but I have FRREERTOS and need other TCP thread to work together. I understand raw API is not thread safe? Any examples or help steering me in the right direction would be apricated. Thanks Colin

[lwip-users] mbedtls with netconn examples

2020-09-13 Thread Colin Stanley
Is it possible to use the netconn api with altcp / mdebtls. Most of the examples use raw API, but I have FRREERTOS and need other TCP thread to work together. I understand raw API is not thread safe? Any examples or help steering me in the right direction would be appreciated. Thanks Colin

Re: [lwip-users] mbedtls

2020-02-19 Thread kbrein...@t-online.de
later. For me this solved at least this issue. There are still others. As Mario said on your other thread: it seems it is a long way to go to optimize all. Klaus -Original-Nachricht- Betreff: Re: [lwip-users] mbedtls Datum: 2020-02-19T12:42:36+0100 Von: "Trampas Stern" An

Re: [lwip-users] mbedtls

2020-02-19 Thread Trampas Stern
The processor is the ATSAME70 with 384K SRAM, out of which the stack/heap is 250k so less than 130k is being used by static allocation. The web server works without https, and I have it setup for 10 connections. The problem appears to be worse with DEBUG messaging off. However I do not have

Re: [lwip-users] mbedtls

2020-02-19 Thread tomek wilkxt
What processor do you have, do you have enough RAM? How do you turn off DEBUG problem occurs? When the browser downloads each file, a new connection is made, which consumes RAM. Process httpd for a permanent connection which is only one handshake. wt., 18 lut 2020 o 21:48 Trampas Stern

Re: [lwip-users] mbedtls

2020-02-18 Thread Trampas Stern
Right now the interface sometimes works and sometimes does not not. I have not found the issue, maybe some one can point me in the right direction? Thanks Trampas ssl_tls.c 8936: => free ssl_tls.c 9001: <= free ethernet.c 313: Network up IP=192.168.168.156 tcp_out.c 1097: tcp_enqueue_flags:

Re: [lwip-users] mbedtls

2020-02-18 Thread Trampas Stern
I figured as much... I am slow at learning this stuff, and figured adding the note to the forum is good for next guy. My next problem is that with https I am having problems transferring data. and getting http_err calls closing connections. ttpd.c 2792: http_accept 20453718 / 0 httpd.c 2792:

Re: [lwip-users] mbedtls

2020-02-18 Thread Simon Goldschmidt
Trampas Stern wrote: > I found that chrome will not work with openssl keys generated by the comments > in the code I found I had to generate different keys using the following > commands.  > [..] Well, the code in the comment did work at some time. I don't think I can keep up with the speed

Re: [lwip-users] mbedtls

2020-02-18 Thread Trampas Stern
I found that chrome will not work with openssl keys generated by the comments in the code I found I had to generate different keys using the following commands. openssl ecparam -genkey -name prime256v1 -out ca.key openssl req -x509 -new -SHA256 -nodes -key ca.key -days 3650 -out ca.crt see:

Re: [lwip-users] mbedtls

2020-02-17 Thread Trampas Stern
It appears that ALTCP_MBEDTLS_ENTROPY_PTR is a memory location not a pointer to function. I just went in and hacked the entropy_poll.c and created a new function: int mbedtls_platform_entropy_poll( void *data, unsigned char *output, size_t len, size_t *olen ) {

Re: [lwip-users] mbedtls

2020-02-17 Thread goldsi...@gmx.de
Am 17.02.2020 um 18:09 schrieb Trampas Stern: > Does anyone know how on an embedded platform to setup the entropy using > mbedtls? I did that, but it's been a while, and I don't remember from the top of my head. I think you *can* use a string entropy source and implement that correctly or you

[lwip-users] mbedtls

2020-02-17 Thread Trampas Stern
Does anyone know how on an embedded platform to setup the entropy using mbedtls? Specifically I am trying to get https running with lwip and getting an assertion failure: Assertion "httpd_init: altcp_tls_new failed" failed at line 2872 in ../src/libraries/lwip/src/apps/http/httpd.c Which I