• Registered: 2017-04-03
  • Posts: 2

Topic: Configure Apache to work with WolfSSL+ECC508A+Atmel-basic-node-auth

Hi,

I'm trying to run WolfSSL+ECC508a and Apache server.
The chip is provisioned with default fixed keys from Atmel-basic-node-auth example as mentioned here (https://www.wolfssl.com/wolfSSL/wolfssl-atmel.html).

FW seems to be working fine, but I have problem with Apache configuration.

Does anyone know how to configure Apache to use keys from the example?

Thanks,

Share

  • From: Bozeman
  • Registered: 2014-05-09
  • Posts: 777

Re: Configure Apache to work with WolfSSL+ECC508A+Atmel-basic-node-auth

Hi belussi,

We are happy to help with anything wolfSSL related. We have no experience configuring Apache to use keys from a hardware module, I apologize. Have you contacted Apache support in regards to this?

https://httpd.apache.org/support.html


Regards,

Kaleb

Kaleb J. Himes's Website

Share

3 Reply by belussi (edited by belussi 2017-04-04 00:33:52)

  • Registered: 2017-04-03
  • Posts: 2

Re: Configure Apache to work with WolfSSL+ECC508A+Atmel-basic-node-auth

Hi,

Thank you for your response.

Let me ask one more question. How to use these keys with WolfSSL server example from here:
https://www.wolfssl.com/wolfSSL/wolfssl-quickstart.html

What is the easiest way to generate server-cert.pem and server-key.pem keys basing on signer and device keys provided by Atmel?

Best regards,

Share

  • From: Bozeman
  • Registered: 2014-05-09
  • Posts: 777

Re: Configure Apache to work with WolfSSL+ECC508A+Atmel-basic-node-auth

Hi belussi,

We have an example of doing certificate generation here: https://github.com/wolfSSL/wolfssl-exam … gen/test.c

You would simply modify the section on lines 97 - 114 (https://github.com/wolfSSL/wolfssl-exam … test.c#L97)

/*---------------------------------------------------------------------------*/
/* Generate new ecc key */
/*---------------------------------------------------------------------------*/
    printf("initializing the rng\n");
    ret = wc_InitRng(&rng);
    if (ret != 0) goto fail;

    printf("Generating a new ecc key\n");
    ret = wc_ecc_init(&newKey);
    if (ret != 0) goto fail;

    ret = wc_ecc_make_key(&rng, 32, &newKey);
    if (ret != 0) goto fail;

    printf("Successfully created new ecc key\n\n");
/*---------------------------------------------------------------------------*/
/* END */
/*---------------------------------------------------------------------------*/

To use the ECC key provided by the ATECC508A module instead of creating a new one with the software, retrieve it from the hardware.

I tried to provide "step-by-step" comments to make it easy to understand the flow of what is happening in the certificate generation example but if you have any questions please let me know.


Warm Regards,

Kaleb

Kaleb J. Himes's Website

Share