search

advancedtelematic / ota-community-edition

End-to-end Over The Air updates
Mozilla Public License 2.0
54 stars 23 forks source link

Fix/implicit prov #90

Closed pattivacek closed 4 years ago

pattivacek commented 6 years ago

I noticed that the implicit device credential provisioning explanation was a bit out of date, so that was relatively easy to fix. However, I think new_client is also stale. Ideally, it would just re-use cert-provider since that already exists to do a lot of that work and it was specifically designed for this type of use case. For example, see:

If we aren't able to use cert-provider, then we need to supply root.crt and gateway.url ourselves, but I'm not quite sure where to get them. Step 4 of the root certification doc in the quickstart guide has an example, but I don't know where to get the credentials in start.sh.

@taheris can you perhaps guide me here? Or if it is obvious and easy for you to connect the pieces, please go ahead. (Note that the second commit is likely not to work; it is just a WIP example idea.)

zabbal commented 5 years ago

The links to *.py examples are dead. Any idea where was it moved?

pattivacek commented 5 years ago

The links to *.py examples are dead. Any idea where was it moved?

Fixed all the links.

pattivacek commented 5 years ago

Rebased and updated with recent changes and suggestions from @lbonn / @ivankliuk.

Note that on meta-updater master, implicit provisioning is now known as "device credential provisioning", which is reflected in this PR. If you're using an older branch, there are PRs open to backport those changes (https://github.com/advancedtelematic/meta-updater/pull/526, https://github.com/advancedtelematic/meta-updater/pull/527, and https://github.com/advancedtelematic/meta-updater/pull/528), so until those are merged, you still have to use aktualizr-ca-implicit-prov instead of aktualizr-device-prov.