Edgelock SE051: TLS server mutual authentication

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Edgelock SE051: TLS server mutual authentication

Jump to solution
3,780 Views
mukeshkumar_prajapati
Contributor II

Hello NXP community,

I am using SE051 with embedded Linux, where I store private key in SE051 and certificate is in file system, embedded Linux board run as TLS server and want to enable mutual authentication using SE051, I read example codes and online document where I could not find any solution which match my requirement. could you support on this How can I achieve this  using openssl C API.

Thanks in advance,

Mukesh Prajapati

Labels (1)
0 Kudos
Reply
1 Solution
3,759 Views
Kan_Li
NXP TechSupport
NXP TechSupport

Hi @mukeshkumar_prajapati ,

 

We have a script for TLS server in the folder of simw-top\demos\linux\tls_client\scripts, named as "tlsServer.sh", for demo purpose, it uses the server key stored locally, and if you store the key in SE, you may create a ref key to it. Please kindly refer to simw-top/doc/demos/se05x/seTool/Readme.html for details.

 

If you run TLS server and TLS client within the same platform, you have to use the accessManager as well. Please kindly refer to  simw-top/doc/hostlib/hostLib/accessManager/doc/accessManager.html for more detais.

 

Hope that helps,

 

Have a great day,
Kan


-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

View solution in original post

0 Kudos
Reply
3 Replies
78 Views
MohitGediya
Contributor II

What if setup runs on zephyr based OS(server).
Which operations we can perform ?

0 Kudos
Reply
3,760 Views
Kan_Li
NXP TechSupport
NXP TechSupport

Hi @mukeshkumar_prajapati ,

 

We have a script for TLS server in the folder of simw-top\demos\linux\tls_client\scripts, named as "tlsServer.sh", for demo purpose, it uses the server key stored locally, and if you store the key in SE, you may create a ref key to it. Please kindly refer to simw-top/doc/demos/se05x/seTool/Readme.html for details.

 

If you run TLS server and TLS client within the same platform, you have to use the accessManager as well. Please kindly refer to  simw-top/doc/hostlib/hostLib/accessManager/doc/accessManager.html for more detais.

 

Hope that helps,

 

Have a great day,
Kan


-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

0 Kudos
Reply
3,656 Views
mukeshkumar_prajapati
Contributor II
Hello @Kan_Li ,

Thanks for your reply, and it has resolved my issue.
0 Kudos
Reply
%3CLINGO-SUB%20id%3D%22lingo-sub-2113708%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3EEdgelock%20SE051%3A%20TLS%20server%20mutual%20authentication%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2113708%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3EHello%20NXP%20community%2C%3C%2FP%3E%3CP%3EI%20am%20using%20SE051%20with%20embedded%20Linux%2C%20where%20I%20store%20private%20key%20in%20SE051%20and%20certificate%20is%20in%20file%20system%2C%20embedded%20Linux%20board%20run%20as%20TLS%20server%20and%20want%20to%20enable%20mutual%20authentication%20using%20SE051%2C%20I%20read%20example%20codes%20and%20online%20document%20where%20I%20could%20not%20find%20any%20solution%20which%20match%20my%20requirement.%20could%20you%20support%20on%20this%20How%20can%20I%20achieve%20this%26nbsp%3B%20using%20openssl%20C%20API.%3C%2FP%3E%3CP%3EThanks%20in%20advance%2C%3C%2FP%3E%3CP%3EMukesh%20Prajapati%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2113708%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CLINGO-LABEL%3ESE050%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2374396%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%20translate%3D%22no%22%3ERe%3A%20Edgelock%20SE051%3A%20TLS%20server%20mutual%20authentication%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2374396%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3EWhat%20if%20setup%20runs%20on%20zephyr%20based%20OS(server).%3CBR%20%2F%3EWhich%20operations%20we%20can%20perform%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2124463%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%20translate%3D%22no%22%3ERe%3A%20Edgelock%20SE051%3A%20TLS%20server%20mutual%20authentication%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2124463%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3EHello%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fcommunity.nxp.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F59276%22%20target%3D%22_blank%22%3E%40Kan_Li%3C%2FA%3E%26nbsp%3B%2C%3CBR%20%2F%3E%3CBR%20%2F%3EThanks%20for%20your%20reply%2C%20and%20it%26nbsp%3Bhas%20resolved%20my%20issue.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2114329%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%20translate%3D%22no%22%3ERe%3A%20Edgelock%20SE051%3A%20TLS%20server%20mutual%20authentication%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2114329%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fcommunity.nxp.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F242577%22%20target%3D%22_blank%22%3E%40mukeshkumar_prajapati%3C%2FA%3E%26nbsp%3B%2C%3C%2FP%3E%0A%3CBR%20%2F%3E%0A%3CP%3EWe%20have%20a%20script%20for%20TLS%20server%20in%20the%20folder%20of%26nbsp%3Bsimw-top%5Cdemos%5Clinux%5Ctls_client%5Cscripts%2C%20named%20as%20%22tlsServer.sh%22%2C%20for%20demo%20purpose%2C%20it%20uses%20the%20server%20key%20stored%20locally%2C%20and%20if%20you%20store%20the%20key%20in%20SE%2C%20you%20may%20create%20a%20ref%20key%20to%20it.%20Please%20kindly%20refer%20to%26nbsp%3Bsimw-top%2Fdoc%2Fdemos%2Fse05x%2FseTool%2FReadme.html%20for%20details.%3C%2FP%3E%0A%3CBR%20%2F%3E%0A%3CP%3EIf%20you%20run%20TLS%20server%20and%20TLS%20client%20within%20the%20same%20platform%2C%20you%20have%20to%20use%20the%20accessManager%20as%20well.%20Please%20kindly%20refer%20to%26nbsp%3B%26nbsp%3Bsimw-top%2Fdoc%2Fhostlib%2FhostLib%2FaccessManager%2Fdoc%2FaccessManager.html%20for%20more%20detais.%3C%2FP%3E%0A%3CBR%20%2F%3E%0A%3CP%3EHope%20that%20helps%2C%3C%2FP%3E%0A%3CBR%20%2F%3E%0A%3CP%3EHave%20a%20great%20day%2C%3CBR%20%2F%3EKan%3C%2FP%3E%0A%3CP%3E%3CBR%20%2F%3E-------------------------------------------------------------------------------%3CBR%20%2F%3ENote%3A%3CBR%20%2F%3E-%20If%20this%20post%20answers%20your%20question%2C%20please%20click%20the%20%22Mark%20Correct%22%20button.%20Thank%20you!%3CBR%20%2F%3E-%20We%20are%20following%20threads%20for%207%20weeks%20after%20the%20last%20post%2C%20later%20replies%20are%20ignored%3CBR%20%2F%3EPlease%20open%20a%20new%20thread%20and%20refer%20to%20the%20closed%20one%2C%20if%20you%20have%20a%20related%20question%20at%20a%20later%20point%20in%20time.%3CBR%20%2F%3E-------------------------------------------------------------------------------%3C%2FP%3E%3C%2FLINGO-BODY%3E