Re: [dev] Is it possible to default white-list pair-wise credentials provisioning

2019-01-02 Thread Nathan Heldt-Sheller
Hi George, With symmetric creds, unfortunately no, there is no way to establish a secure connection (e.g. DTLS) without each Device having an installed /cred that is uniquely correlated to the Device ID of the other Device... in other words, your provisioning step 5) is mandatory in order to se

Re: [dev] Is it possible to default white-list pair-wise credentials provisioning

2019-01-02 Thread Kishen Maloor
> Is it possible to setup server and client to automatically do pair-wise > credentials or skip the need > for pair-wise credentials? I am not aware of an OCF documented/prescribed way of realizing this using PSK credentials (though it seems very doable, just technically speaking). However, I b

[dev] Is it possible to default white-list pair-wise credentials provisioning

2019-01-02 Thread George Nash
Is it possible to setup server and client to automatically do pair-wise credentials or skip the need for pair-wise credentials? Right now I follow a multi-step process to get a client and server on-boarded and provisioned to talk with one another. (Note some of this may be simplified using the

Re: [dev] Certificate-based credential (DTLS fails to find cipher suite)

2019-01-02 Thread Khaled Elsayed
Hi Aleksey, Thanks for taking a close look at the log. You are absolutely right about the observation that InitCiherSuite comes back empty handed. The credentials are perfect and have credtype=8 and I check that the .dat files are read correctly by both the client and server codes. *There is a bu

Re: [dev] Certificate-based credential (DTLS fails to find cipher suite)

2019-01-02 Thread Aleksey Volkov
Hi Khaled,   I noticed that in your log between the lines  'In InitCipherSuiteListInternal' & 'Out InitCipherSuiteListInternal' there are no any messages. This may indicate that there are no suitable credentials in the cred resource, or they have the wrong type value. (As I understand it

Re: [dev] Certificate-based credential (DTLS fails to find cipher suite)

2019-01-02 Thread Khaled Elsayed
Thanks Aleksey. For sure I am using OC_CLIENT_SERVER mode. My code is based on ~/iotivity/examples/OCFSecure which already took core of this in the client.cpp code. On Fri, Dec 28, 2018 at 1:40 PM Oleksiy Volkov wrote: > Hi Khaled, > > > > maybe you use 'client only' (OC_CLIENT) mode instead of