Revision 3:ad353d5bf223, committed 2017-07-21

Comitter:

HoYa

Date:

Fri Jul 21 03:14:02 2017 +0000

Parent:

2:d7647babe160

Commit message:

Secured TCP Testing

Changed in this revision

diff -r d7647babe160 -r ad353d5bf223 main.cpp
--- a/main.cpp	Thu Jul 20 08:24:24 2017 +0000
+++ b/main.cpp	Fri Jul 21 03:14:02 2017 +0000
@@ -7,6 +7,28 @@
 
 SpwfSAInterface spwf(D8, D2, false);
 
+//www.mbed.com CA certificate in PEM format
+char  CA_cert []="-----BEGIN CERTIFICATE-----\r\n"
+"MIIDVDCCAjygAwIBAgIDAjRWMA0GCSqGSIb3DQEBBQUAMEIxCzAJBgNVBAYTAlVT\r\n"
+"MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9i\r\n"
+"YWwgQ0EwHhcNMDIwNTIxMDQwMDAwWhcNMjIwNTIxMDQwMDAwWjBCMQswCQYDVQQG\r\n"
+"EwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMSR2VvVHJ1c3Qg\r\n"
+"R2xvYmFsIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2swYYzD9\r\n"
+"9BcjGlZ+W988bDjkcbd4kdS8odhM+KhDtgPpTSEHCIjaWC9mOSm9BXiLnTjoBbdq\r\n"
+"fnGk5sRgprDvgOSJKA+eJdbtg/OtppHHmMlCGDUUna2YRpIuT8rxh0PBFpVXLVDv\r\n"
+"iS2Aelet8u5fa9IAjbkU+BQVNdnARqN7csiRv8lVK83Qlz6cJmTM386DGXHKTubU\r\n"
+"1XupGc1V3sjs0l44U+VcT4wt/lAjNvxm5suOpDkZALeVAjmRCw7+OC7RHQWa9k0+\r\n"
+"bw8HHa8sHo9gOeL6NlMTOdReJivbPagUvTLrGAMoUgRx5aszPeE4uwc2hGKceeoW\r\n"
+"MPRfwCvocWvk+QIDAQABo1MwUTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTA\r\n"
+"ephojYn7qwVkDBF9qn1luMrMTjAfBgNVHSMEGDAWgBTAephojYn7qwVkDBF9qn1l\r\n"
+"uMrMTjANBgkqhkiG9w0BAQUFAAOCAQEANeMpauUvXVSOKVCUn5kaFOSPeCpilKIn\r\n"
+"Z57QzxpeR+nBsqTP3UEaBU6bS+5Kb1VSsyShNwrrZHYqLizz/Tt1kL/6cdjHPTfS\r\n"
+"tQWVYrmm3ok9Nns4d0iXrKYgjy6myQzCsplFAMfOEVEiIuCl6rYVSAlk6l5PdPcF\r\n"
+"PseKUgzbFbS9bZvlxrFUaKnjaZC2mqUPuLk/IH2uSrW4nOQdtqvmlKXBx4Ot2/Un\r\n"
+"hw4EbNX/3aBd7YdStysVAq45pmp06drE57xNNB6pXE0zX5IJL4hmXXeXxx12E6nV\r\n"
+"5fEWCRE11azbJHFwLJhWC9kXtNHjUStedejV0NxPNO3CBWaAocvmMw==\r\n"
+"-----END CERTIFICATE-----\r\n";
+
 int main() {
     pc.printf("\r\n");
     pc.printf("Start Application\r\n");
@@ -26,12 +48,14 @@
     pc.printf("=> MAC Address is: %s\r\n", (mac) ? mac : "No MAC");
     
     // DNS
+/*
     pc.printf("\r\n");
     pc.printf("DNS Testing...\r\n");
     SocketAddress addr(&spwf, "st.com");
     pc.printf("<st.com> is resolved to: %s\r\n", addr.get_ip_address());
-    
+*/
     // Unsecured TCP
+/*
     pc.printf("\r\n");
     pc.printf("Unsecured TCP Testing...\r\n");
     TCPSocket socket(&spwf);
@@ -55,13 +79,33 @@
     }
     pc.printf("Close TCP socket\r\n");
     socket.close();
-       
-    printf ("Disconnect from AP\r\n");
-    spwf.disconnect();    
+*/  
+    // Secured TCP
+    pc.printf("\r\n");
+    pc.printf("Secured TCP Testing...\r\n");
+    if (!spwf.clean_TLS_certificate(ALL))
+        pc.printf("=> Failed to clean TLS certificate\r\n");
+    if (!spwf.set_TLS_certificate(CA_cert, sizeof(CA_cert), FLASH_CA_ROOT_CERT)) 
+        pc.printf("=> Failed to set TLS certificate\r\n");
+    if (!spwf.set_TLS_SRV_domain("*.mbed.com", FLASH_DOMAIN))
+        printf("=> Failed to set TLS CA domain\r\n");
+    spwf.set_secure_mode();
+    TCPSocket socket(&spwf);
+    spwf.set_unsecure_mode();
+    int err = socket.connect("www.mbed.com", 443);
+    if (err != 0)
+        pc.printf("=> Failed to connect. (%d)\r\n", err);
+    else
+        pc.printf("=> Success.\r\n");
+    pc.printf("Close TCP socket\r\n");
+    socket.close();
+           
+    pc.printf("Disconnect from AP\r\n");
+    spwf.disconnect();
     
     while (1) {
         led = !led;
         wait(0.5);
     }
 }
-    
\ No newline at end of file
+  
\ No newline at end of file