Welcome to the Pycom forum Forum
    • \[\[global:header.categories\]\]
    • \[\[global:header.recent\]\]
    • \[\[global:header.tags\]\]
    • \[\[global:header.popular\]\]
    • Login

    Explore Pybytes | Official Documentation | Report a Firmware Bug/Issue | GitHub

    Q: SSL certificate and private key file format (PEM vs. DER)?

    Scheduled Pinned Locked Moved WiPy 2&3
    3 Posts 2 Posters 1.7k Views 2 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • U Offline
      ubiq_01 Pybytes Beta
      last edited by

      Hello Daniel, dear all

      does the SSL implementation support client authentication as well (using the code below that works on standard Python)

      c=ssl.wrap_socket(s,
      keyfile="client.key.pem",
      certfile="client.crt.pem",
      ca_certs="ca.crt.pem",
      cert_reqs=ssl.CERT_REQUIRED)

      and what is the format for the certificates and private key? Can .pem be used or does it have to be .der? Or are both supported?

      best regards
      Ralf

      1 Reply Last reply Reply Quote 0
      • D Offline
        daniel
        last edited by

        Hello Ralph,

        We use mbed TLS and both formats (PEM and DER) are supported. You can use the standard Python API as you suggest. However, due to lack of memory, certificate validation doesn't work since we enabled Bluetooth and we are still working on a solution.

        Cheers,
        Daniel

        1 Reply Last reply Reply Quote 1
        • U Offline
          ubiq_01 Pybytes Beta
          last edited by

          Hello Daniel,

          many thanks! I successfully tested the stuff for a https POST with certificate based client authentication on an older (0.9.7.b1) firmware.
          https://twitter.com/_rac01/status/822072047937404931

          best regards
          Ralf

          1 Reply Last reply Reply Quote 0

          Hello! It looks like you're interested in this conversation, but you don't have an account yet.

          Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

          With your input, this post could be even better 💗

          Register Login
          • 1 / 1
          • First post
            Last post

          Pycom on Twitter

          Pycom