Closed apsk25 closed 4 years ago
Hey @apsk25, IMHO its a question for leshan developers :D here in my setup devices can only reach the DM server using BS server. BS server can be configured as for example to use a default PSK or a default certificate and new customers need to bootstrap in order to pairing and retrieve real credentials generated on BS server.
@bzero Thanks.
Can you give me a small demo on what you do? Actually what exactly is the meaning of bootstrapping? What added security it adds when we can connect to the server using Ids and psk without bootstrapping? Thanks a lot.
Sure man, found this image with step by step:
source: https://medium.com/@vrmvrm/device-key-distribution-with-lightweight-m2m-36cdc12e5711
Hi,
I am trying to connect using bootstrap leshan server. leshan.eclipse.org/bs/
Following two identies have been created :-1:
Scenario 1 dtls_build$ sudo ./lwm2mclient -h leshan.eclipse.org -4 -n puresoft -b rm: cannot remove '/etc/ready': No such file or directory
lwm2m client version : [2][0][0]
lwm2m client sleeping for 30 seconds Trying to bind LWM2M Client to port 56830 LWM2M Client "puresoft" started on port 56830
Scenario 2
wakaama/dtls_build$ ./lwm2mclient -h leshan.eclipse.org -4 -n amrit -i amrit -s 1234 -b -p 5684 rm: cannot remove '/etc/ready': No such file or directory
lwm2m client version : [2][0][0]
lwm2m client sleeping for 30 seconds Trying to bind LWM2M Client to port 56830 LWM2M Client "amrit" started on port 56830
Having said that, I want to know the intent and purpose of bootstrapping feature in LWM2M.
I am able to succesfully create an identitiy on leshan.eclipse.org and also connect.
My understanding was that If I use client inititiated bootstrapping then ideally I should not have to use the identity and psk, but the http://leshan.eclipse.org/bs/ also has provision for adding psk and identity.
Can anyone help clarify?