topic Re: Generate CSR inside SE050 in Secure Authentication

Generate CSR inside SE050

jb2 — Mon, 16 Oct 2023 13:22:23 GMT

Hello,

I use SE050 MW in C on a esp32.

I can generate a key pair with sss_key function but I don't find any function to generate and sign the CSR.

I don't want to put private key out the SE050 and use mbedtls.

Thank you

Re: Generate CSR inside SE050

Kan_Li — Tue, 17 Oct 2023 06:04:22 GMT

Hi @jb2 ,

We have a demo on this topic, please kindly refer to simw- top/doc/demos/se05x/certificate_demo/Readme.html for details, and the source code may be found in simw-top\demos\se05x\certificate_demo .

Hope that helps,

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

Re: Generate CSR inside SE050

jb2 — Tue, 17 Oct 2023 07:06:52 GMT

This example is for self-signed certificate. Do you have the same to create a Certificate Signing Request ?

Thank you

Re: Generate CSR inside SE050

Kan_Li — Wed, 25 Oct 2023 02:09:59 GMT

Hi @jb2 ,

So far we don't have such kind of demo available, but which openssl/mbedtls version are you using? We may try to create a generic example code based on that.

Have a great day,
Kan

Re: Generate CSR inside SE050

jb2 — Wed, 25 Oct 2023 06:07:27 GMT

I used mbedtls functions and I succeed to create my CSR.

I used the mbedtls example https://github.com/Mbed-TLS/mbedtls/blob/development/programs/x509/cert_req.c and I modified the file `x509write_csr.c` to use my function instead of `mbedtls_pk_sign`.

But I juste saw that `mbedtls_pk_sign_restartable( ctx, ...` use `ctx->pk_info->sign_func(...` so I think that it's cleaner to change this variable. I'll try.

Re: Generate CSR inside SE050

Kan_Li — Thu, 26 Oct 2023 02:42:00 GMT

Hi @jb2 ,

Great to know that! Please kindly let me know if you have any further questions.

Have a great day,
Kan