Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

DTLS support for CoAP (IDFGH-126) #1379

Closed
lancegerday opened this issue Dec 13, 2017 · 14 comments
Closed

DTLS support for CoAP (IDFGH-126) #1379

lancegerday opened this issue Dec 13, 2017 · 14 comments

Comments

@lancegerday
Copy link

After using make menuconfig and component config->mbedTLS->support DTLS protocol (all versions).

image

I see no way to use DTLS with CoAP using the example client-server code no additional .h files to be included appear.

My final goal is to implement simple a client/server using CoAP with DTLS in PreSharedKey mode which means using cipher-suite AEAD_AES_128_CCM_8 which should be able to use the built-in AES hardware acceleration.
@negativekelvin
Copy link
Contributor

The libcoap submodule is not using the dtls branch

@lancegerday
Copy link
Author

But then how can I use DTLS with CoAP for esp32? DTLS is part of the CoAP standard as stated in RFC 7252.

@projectgus projectgus changed the title DTLS implemented? DTLS support for CoAP Dec 14, 2017
@projectgus
Copy link
Contributor

ESP-IDF has network protocol level DTLS support via mbedTLS. However the version of upstream libcoap we ship does not include DTLS support.

It appears that DTLS support has since been added to the main branch of libcoap and there was a pre-4.1.2 release that uses a library called "tinydtls". There appears to also be openssl DTLS support, but no mbedTLS support yet.

I agree that it's desirable for us to support CoAP over DTLS, as soon as possible.

@FayeY FayeY changed the title DTLS support for CoAP [TW#17025] DTLS support for CoAP Dec 14, 2017
@negativekelvin
Copy link
Contributor

Any progress?

@JcBernack
Copy link

Bump. We will need this feature and would really appreciate some advice on how to get this going - or an estimate on when we can expect progress on this issue.

@daveismith
Copy link

@JcBernack / @projectgus - it seems like there's support for OpenSSL in the upstream project now. Is that sufficient, or does there need to be support for mbedtls?

@negativekelvin
Copy link
Contributor

@daveismith no because esp-idf openssl shim does not support required functions

@H-LK
Copy link

H-LK commented Oct 27, 2018

I would also like to have this function soon.

@TorstenL
Copy link

TorstenL commented Feb 3, 2019

Bump - It would be really great to have DTLS support

@projectgus projectgus changed the title [TW#17025] DTLS support for CoAP DTLS support for CoAP (IDFGH-126) Mar 12, 2019
mrdeep1 added a commit to mrdeep1/esp-idf that referenced this issue Mar 26, 2019
@mrdeep1
Add DTLS support to libcoap using TinyDTLS
7eb4825 
As TinyDTLS is already a submodule to libcoap, adding in DTLS support is
straightforward, but only supports PSK at this point in time.

components/coap/CMakeLists.txt:
components/coap/component.mk:

Add in the new files that have to be built

components/coap/Makefile.projbuild:

Update the compiler options with -DESPIDF_VERSION

components/coap/libcoap:

Update the version to include the correct version of tinydtls submodule

components/coap/port/dtls_prng.c:
components/coap/port/include/coap/dtls_config.h:

New port files for DTLS

components/coap/port/include/coap_config_posix.h:

Include building with TinyDTLS

examples/protocols/coap_client/README.md:
examples/protocols/coap_client/main/Kconfig.projbuild:
examples/protocols/coap_client/main/coap_client_example_main.c:

Update CoAP client to support DTLS

examples/protocols/coap_server/README.md:
examples/protocols/coap_server/main/Kconfig.projbuild:
examples/protocols/coap_server/main/coap_server_example_main.c:

Update CoAP server to support DTLS

See Issue espressif#1379
mrdeep1 added a commit to mrdeep1/esp-idf that referenced this issue Mar 27, 2019
@mrdeep1
Add DTLS support to libcoap using TinyDTLS
1405c8d 
As TinyDTLS is already a submodule to libcoap, adding in DTLS support is
straightforward, but only supports PSK at this point in time.

components/coap/CMakeLists.txt:
components/coap/component.mk:

Add in the new files that have to be built

components/coap/Makefile.projbuild:

Update the compiler options with -DESPIDF_VERSION

components/coap/libcoap:

Update the version to include the correct version of tinydtls submodule

components/coap/port/dtls_prng.c:
components/coap/port/include/coap/dtls_config.h:

New port files for DTLS

components/coap/port/include/coap_config_posix.h:

Include building with TinyDTLS

examples/protocols/coap_client/README.md:
examples/protocols/coap_client/main/Kconfig.projbuild:
examples/protocols/coap_client/main/coap_client_example_main.c:

Update CoAP client to support DTLS

examples/protocols/coap_server/README.md:
examples/protocols/coap_server/main/Kconfig.projbuild:
examples/protocols/coap_server/main/coap_server_example_main.c:

Update CoAP server to support DTLS

See Issue espressif#1379
@cgawron
Copy link

cgawron commented Apr 8, 2019

According to the Changelog, libcoap 4.2.0 supports DTLS. Has anybody successfully tried it?

@daveismith
Copy link

I've used it with TinyDTLS on the desktop. I'd prefer an mbed implementation as TinyDTLS doesn't support x509 certificates and says they don't want to (even though the patches aren't too significant to make it do so)

@jitin17
Copy link
Contributor

jitin17 commented Apr 8, 2019

@cgawron I have used TinyDTLS with libcoap and it works as expected, and support for DTLS in esp-idf's libcoap is in the pipeline. For your reference obgm/libcoap#313 (comment)
@daveismith It is true that TinyDTLS doesn't support PKI. But if pre-shared keys suffice to the need then one can use TinyDTLS.

@daveismith
Copy link

@jitin17 - agreed that PSK or RPK may be sufficient for some things, but IoT standards are starting to require PKI. An example would be dotdot, which requires the use of PKI with operational certificates to play on the application layer. It's important to have this capability in devices like the ESP for developers.

mrdeep1 added a commit to mrdeep1/esp-idf that referenced this issue Apr 16, 2019
@mrdeep1
Add DTLS support to libcoap using TinyDTLS
517340d 
As TinyDTLS is already a submodule to libcoap, adding in DTLS support is
straightforward, but only supports PSK at this point in time.

components/coap/CMakeLists.txt:
components/coap/component.mk:

Add in the new files that have to be built
Replace libcoap/src/coap_notls.c with libcoap/src/coap_tinydtls.c

components/coap/libcoap:

Update the version to include the correct version of tinydtls submodule

components/coap/port/include/coap/dtls_config.h:

New port file for DTLS

components/coap/port/include/coap_config_posix.h:
components/coap/port/rijndael.c

Include building with TinyDTLS

examples/protocols/coap_client/README.md:
examples/protocols/coap_client/main/Kconfig.projbuild:
examples/protocols/coap_client/main/coap_client_example_main.c:

Update CoAP client to support DTLS

examples/protocols/coap_server/README.md:
examples/protocols/coap_server/main/Kconfig.projbuild:
examples/protocols/coap_server/main/coap_server_example_main.c:

Update CoAP server to support DTLS
Change "no data" to "Hello World!" to prevent confusion

See Issue espressif#1379
mrdeep1 added a commit to mrdeep1/esp-idf that referenced this issue Apr 20, 2019
@mrdeep1
Add DTLS support to libcoap using TinyDTLS
de9facb 
As TinyDTLS is already a submodule to libcoap, adding in DTLS support is
straightforward, but only supports PSK at this point in time.

components/coap/CMakeLists.txt:
components/coap/component.mk:

Add in the new files that have to be built
Replace libcoap/src/coap_notls.c with libcoap/src/coap_tinydtls.c

components/coap/libcoap:

Update the version to include the correct version of tinydtls submodule

components/coap/port/include/coap/dtls_config.h:

New port files for DTLS

components/coap/port/include/coap_config_posix.h:
components/coap/port/rijndael.c
components/coap/port/sha2.c

Include building with TinyDTLS

examples/protocols/coap_client/README.md:
examples/protocols/coap_client/main/Kconfig.projbuild:
examples/protocols/coap_client/main/coap_client_example_main.c:

Update CoAP client to support DTLS

examples/protocols/coap_server/README.md:
examples/protocols/coap_server/main/Kconfig.projbuild:
examples/protocols/coap_server/main/coap_server_example_main.c:

Update CoAP server to support DTLS
Change "no data" to "Hello World!" to prevent confusion

See Issue espressif#1379
mrdeep1 added a commit to mrdeep1/esp-idf that referenced this issue Apr 22, 2019
@mrdeep1
Add DTLS support to libcoap using TinyDTLS
147470c 
As TinyDTLS is already a submodule to libcoap, adding in DTLS support is
straightforward, but only supports PSK at this point in time.

components/coap/CMakeLists.txt:
components/coap/component.mk:

Add in the new files that have to be built
Replace libcoap/src/coap_notls.c with libcoap/src/coap_tinydtls.c

components/coap/libcoap:

Update the version to include the correct version of tinydtls submodule

components/coap/port/include/coap/dtls_config.h:
components/coap/port/include/coap/hmac.h
components/coap/port/rijndael.c

New port files for DTLS

components/coap/port/include/coap_config_posix.h:

Include building with TinyDTLS

examples/protocols/coap_client/README.md:
examples/protocols/coap_client/main/Kconfig.projbuild:
examples/protocols/coap_client/main/coap_client_example_main.c:

Update CoAP client to support DTLS

examples/protocols/coap_server/README.md:
examples/protocols/coap_server/main/Kconfig.projbuild:
examples/protocols/coap_server/main/coap_server_example_main.c:

Update CoAP server to support DTLS
Change "no data" to "Hello World!" to prevent confusion

See Issue espressif#1379
@mrdeep1 mrdeep1 mentioned this issue Apr 22, 2019
Closed
mrdeep1 added a commit to mrdeep1/esp-idf that referenced this issue Jun 3, 2019
@mrdeep1
Add DTLS support to libcoap using TinyDTLS
90f4379 
As TinyDTLS is already a submodule to libcoap, adding in DTLS support is
straightforward, but only supports PSK at this point in time.

components/coap/CMakeLists.txt:
components/coap/component.mk:

Add in the new files that have to be built
Replace libcoap/src/coap_notls.c with libcoap/src/coap_tinydtls.c

components/coap/libcoap:

Update the version to include the correct version of tinydtls submodule

components/coap/port/include/coap/dtls_config.h:
components/coap/port/include/coap/hmac.h
components/coap/port/rijndael.c

New port files for DTLS

components/coap/port/include/coap_config_posix.h:

Include building with TinyDTLS

examples/protocols/coap_client/README.md:
examples/protocols/coap_client/main/Kconfig.projbuild:
examples/protocols/coap_client/main/coap_client_example_main.c:

Update CoAP client to support DTLS

examples/protocols/coap_server/README.md:
examples/protocols/coap_server/main/Kconfig.projbuild:
examples/protocols/coap_server/main/coap_server_example_main.c:

Update CoAP server to support DTLS
Change "no data" to "Hello World!" to prevent confusion

See Issue espressif#1379
@jitin17
Copy link
Contributor

jitin17 commented Jun 18, 2019

@JcBernack @lancegerday @cgawron @daveismith We have worked on adding DTLS support in libcoap with the help of mbedtls, which will help us support both PSK and PKI based authentication. Please take a look at this PR: obgm/libcoap#353
We will try to add it to ESP-IDF as soon as possible.

mrdeep1 added a commit to mrdeep1/esp-idf that referenced this issue Jul 9, 2019
@mrdeep1
Add DTLS support to libcoap using MbedTLS
8262df8 
This update supports DTLS, TLS is a future TODO

components/coap/CMakeLists.txt:
components/coap/component.mk:

Add in the new files that have to be built
Replace libcoap/src/coap_notls.c with libcoap/src/coap_mbedtls.c

components/coap/libcoap:

Update the version to include the current version for supporting MbedTLS

components/coap/port/coap_debug.c:
components/coap/port/coap_mbedtls.c:
components/coap/port/include/coap/coap_dtls.h:

New port files for DTLS

components/coap/port/include/coap_config_posix.h:

Include building with MbedTLS

examples/protocols/coap_client/README.md:
examples/protocols/coap_client/main/CMakeLists.txt:
examples/protocols/coap_client/main/Kconfig.projbuild:
examples/protocols/coap_client/main/coap_client_example_main.c:
examples/protocols/coap_client/main/component.mk:

Update CoAP client to support DTLS

examples/protocols/coap_client/main/coap_ca.pem
examples/protocols/coap_client/main/coap_client.crt
examples/protocols/coap_client/main/coap_client.key

New PKI Certs for CoAP client (copied from wpa2_enterprise example)

examples/protocols/coap_server/README.md:
examples/protocols/coap_server/main/CMakeLists.txt:
examples/protocols/coap_server/main/Kconfig.projbuild:
examples/protocols/coap_server/main/coap_server_example_main.c:
examples/protocols/coap_server/main/component.mk:

Update CoAP server to support DTLS
Change "no data" to "Hello World!" to prevent confusion

examples/protocols/coap_server/main/coap_ca.pem
examples/protocols/coap_server/main/coap_server.crt
examples/protocols/coap_server/main/coap_server.key

New PKI Certs for CoAP server (copied from wpa2_enterprise example)

See Issue espressif#1379
mrdeep1 added a commit to mrdeep1/esp-idf that referenced this issue Jul 20, 2019
@mrdeep1
Add DTLS support to libcoap using MbedTLS
51ddf9d 
This update supports DTLS, TLS is a future TODO

components/coap/CMakeLists.txt:
components/coap/component.mk:

Add in the new files that have to be built
Replace libcoap/src/coap_notls.c with libcoap/src/coap_mbedtls.c

components/coap/libcoap:

Update the version to include the current version for supporting MbedTLS

components/coap/port/coap_debug.c:
components/coap/port/coap_mbedtls.c:
components/coap/port/include/coap/coap_dtls.h:

New port files for DTLS

components/coap/port/include/coap_config_posix.h:

Include building with MbedTLS

examples/protocols/coap_client/README.md:
examples/protocols/coap_client/main/CMakeLists.txt:
examples/protocols/coap_client/main/Kconfig.projbuild:
examples/protocols/coap_client/main/coap_client_example_main.c:
examples/protocols/coap_client/main/component.mk:

Update CoAP client to support DTLS

examples/protocols/coap_client/main/coap_ca.pem
examples/protocols/coap_client/main/coap_client.crt
examples/protocols/coap_client/main/coap_client.key

New PKI Certs for CoAP client (copied from wpa2_enterprise example)

examples/protocols/coap_server/README.md:
examples/protocols/coap_server/main/CMakeLists.txt:
examples/protocols/coap_server/main/Kconfig.projbuild:
examples/protocols/coap_server/main/coap_server_example_main.c:
examples/protocols/coap_server/main/component.mk:

Update CoAP server to support DTLS
Change "no data" to "Hello World!" to prevent confusion

examples/protocols/coap_server/main/coap_ca.pem
examples/protocols/coap_server/main/coap_server.crt
examples/protocols/coap_server/main/coap_server.key

New PKI Certs for CoAP server (copied from wpa2_enterprise example)

See Issue espressif#1379
@igrr igrr closed this as completed in 1aaec80 Aug 21, 2019
0xFEEDC0DE64 pushed a commit to 0xFEEDC0DE64/esp-idf that referenced this issue May 5, 2021
@domints @me-no-dev
Add upload.maximum_size directives to boards.txt. Add partitions to L…
f8a3c61 
…OLIN32 (espressif#1379)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
9 participants
@projectgus @cgawron @daveismith @TorstenL @JcBernack @lancegerday @jitin17 @H-LK @negativekelvin