HTTPS client authentication

Does mutual authentication work over https? Server auth works fine but as soon as we enable client auth 7800 gets rejected. We are properly loaded the local cert and private key. Curl works but the 7800 fails to properly authenticate itself.

Is this expected to work? Is this supported?

Thanks,

Jon

Hi @jonathan.swoboda,

As I know, the latest offical FW Release 4.6.8.0 for HL7800 module supports mutual authentication.
Can you provide me the log with step-by-step?

Thanks,

You can try to delete the current root certificate using the +KCERTDELETE command, before adding a root CA certificate using +KCERTSTORE command.

Then using +KHTTPCFG command to specify TLS and the Cipher suites.

7800.at.log.txt (7.1 KB)

Here is the at log and the log from the test server. If we disable the client auth https works great. However when client auth is enabled (as it is in this log) we get rejected and redirected to a login page. With the same certs CURL works fine.

Any thoughts?

Thanks

Here is the output of ATI9 as well:

CAT-M send: ATI9
CAT-M recv: HL7800.4.6.8
CAT-M recv: HL78xx.4.6.8.0.RK_02_01_02_00_128.20210213
CAT-M recv: 2021/02/13 02:54:56
CAT-M recv: IMEI-SV: xxxxxxxxxxxxxxx
CAT-M recv: Legato RTOS: 18.09.6.ALT1250.rc4 2020/10/06 17:52:39
CAT-M recv: atSwi: 43.00
CAT-M recv: UBOOT: 01.03
CAT-M recv: Apps: RKAPP_02_01_02_00_117__accfd760c9dbf0f87bb2abbca37dbb404d2958a2
CAT-M recv: MAC: ALT1250_02_01_02_00_116_FW
CAT-M recv: PHY: 12.50.241281
CAT-M recv: PMP: 258210
CAT-M recv: SBUB: 0
CAT-M recv: SBFW: 0
CAT-M recv: RPuK:
CAT-M recv: FPuK:
CAT-M recv: RBUB: 0
CAT-M recv: RBFW: 0
CAT-M recv: OK

Hi @jonathan.swoboda,

Currently, HL7800 module is having issue with mutual authentication for HTTPS connection
Sierra is aware of this issue. It will be updated to fix the issue in the further.

Thanks,

Any idea when this may be resolved? When is the next release.

Thanks

Hi @jonathan.swoboda,

I don’t know about the exact time which this issue will be fixed.
However, I will observe it and let you know once I get any update.

Thanks,

Any update on a fix?

Thanks