gp-ca.nxp.com broken? cannot download pre-generated certificates CA

[martinetd]

Hello,

I'd like to use the certificates pre-generated on SE050C, so I need to provide my server with the issuer CA certificates to validate them but the links provided in the application notes do not work.

For example, https://www.nxp.com/docs/en/application-note/AN12436.pdf gives https://www.gp-ca.nxp.com/CA/getCA?caid=63709315050002 for the Attestation ECC root, but opening the link in firefox or wget fails:

--2022-05-17 13:57:55-- https://www.gp-ca.nxp.com/CA/getCA?caid=63709315050002
Resolving www.gp-ca.nxp.com (www.gp-ca.nxp.com)... 92.121.34.12
Connecting to www.gp-ca.nxp.com (www.gp-ca.nxp.com)|92.121.34.12|:443... connected.
HTTP request sent, awaiting response... Read error (Error in the pull function.) in headers.

I also couldn't find the files distributed anywhere else, would you be able to provide me with the files somehow (attachment to these boards?) or have someone fix gp-ca.nxp.com ?

Thank you

[Kan_Li]

Hi @martinetd ,

I just tried this link with the firefox and chrome , both can download the certification, maybe there is some network issue from your side?

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

[martinetd]

Hello @Kan_Li and thanks for the quick reply!

with firefox I get "An error occurred during a connection to www.gp-ca.nxp.com. PR_CONNECT_RESET_ERROR"

I have tried with wget from different location (work and home in Japan, and a server in France), all exhibit the same error. Perhaps it only works from NXP internal network?

As a stop-gap measure would you be allowed to attach these to the forum?

I think I'd need the root and intermediate ECC so these two links:

https://www.gp-ca.nxp.com/CA/getCA?caid=63709315050002

https://www.gp-ca.nxp.com/CA/getCA?caid=63709315060003

thank you

[Kan_Li · Accepted solution]

Hi @martinetd ,

No problem. Please kindly refer to the attachment for details.

Hope that helps,

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

[martinetd]

Thank you!

I will try using these but they look good at first glance (intermediate Subject matches issuer for 0xF0000013 certificate).

If possible please investigate why the site does not work for others, but this is good enough for me.